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ZUSAMMENFASSUNG 



In dieser Arbeit wird (modale) Dependence-Logik untersucht. Diese wur- 
de 2007 von Jouko Vaananen eingefuhrt und ist eine Erweiterung der Lo- 
gik erster Stufe (bzw. der Modallogik) um den Dependence-Operator =(•). 
Fiir Variablen erster Stufe (bzw. propositionale Variablen) xi, . . . ,x„ bedeutet 
= (xx, . . . , x„), dass der Wert von x„ durch die Werte von xj, . . . , x„_i 
bestimmt wird. 

Wir betrachten Fragmente modaler Dependence-Logik, die durch Beschran- 
ken der Menge erlaubter modaler und aussagenlogischer Operatoren definiert 
sind. Wir klassifizieren diese Fragmente in Bezug auf die Komplexitat ihres 
Erfiillbarkeits- und Model-Checking-Problems. Fiir Erfiillbarkeit erhalten wir 
Komplexitatsgrade von P iiber NP, und PSPACEbishinzu NEXP,wahrend 
wir die Fragmente fiir Model-Checking nur in Bezug auf ihre Praktikabilitat 
klassifizieren, d.h. wir zeigen entweder NP-VoUstandigkeit oder Enthaltensein 
in P. 

Anschliefiend untersuchen wir die Erweitenmg modaler Dependence-Logik 
um die sogenannte intuitionistische Implikation. Fiir diese Erweiterung klas- 
sifizieren wir wiederimi die Fragmente in Bezug auf die Komplexitat ihres 
Model-Checking-Problems. Hierbei erhalten wir Komplexitatsgrade von P 
iiber NP und coNP bis hin zu PSPACE. 

Zuletzt analysieren wir noch erststufige Dependence-Logik, Independence- 
friendly-Logik xmd deren Zwei-Variablen-Fragmente. Wir beweisen, dass das 
Erfiillbarkeitsproblem fiir Zwei-Variablen-Dependence-Logik N EXP-vollstan- 
dig ist, wahrend es fiir Zwei-Variablen-Independence-friendly-Logik iment- 
scheidbar ist; imd benutzen dieses Resultat, um zu beweisen, dass letztere 
Logik zudem ausdrucksstarker als die vorherige ist. 

Schlagworte: Dependence-Logik, Komplexitat, Modallogik, Erfiillbarkeit, 
Model-Checking, Zwei-Variablen-Logik, Independence-friendly-Logik, In- 
tuitionistische Logik 



Abstract 



In this thesis (modal) dependence logic is investigated. It was introduced 
in 2007 by Jouko Vaananen as an extension of first-order (resp. modal) logic 
by the dependence operator =(•). For first-order (resp. propositional) vari- 
ables xi, . . . , x„, = (xi, . . . , x„_i, x„) intiiitively states that the value of x„ is 
determined by those of xx, . . . , x„_i. 

We consider fragments of modal dependence logic obtained by restricting 
the set of allowed modal and propositional connectives. We classify these 
fragments with respect to the complexity of their satisfiability and model- 
checking problems. For satisfiability we obtain complexity degrees from P 
over NP, E2 and PSPACE up to NEXP, while for model-checking we only 
classify the fragments with respect to their tractability, i. e. we either show 
NP-completeness or containment in P. 

We then study the extension of modal dependence logic by intuitionistic 
implication. For this extension we again classify the complexity of the model- 
checking problem for its fragments. Here we obtain complexity degrees from 
P over NP and coNP up to PSPACE. 

Finally, we analyze first-order dependence logic, independence-friendly 
logic and their two-variable fragments. We prove that satisfiability for two- 
variable dependence logic is NEXP-complete, whereas for two-variable inde- 
pendence-friendly logic it is undecidable; and use this to prove that the latter 
is also more expressive than the former. 

Ke5^ords: dependence logic, computational complexity, modal logic, expres- 
sivity, satisfiability, model checking, two-variable logic, independence-friendly 
logic, intuitionistic logic 

ACM Subject Classifiers: F.2.2 Complexity of proof procedures; F.4.1 Modal 
logic, Computability theory. Model theory; F.1.3 Reducibility and complete- 
ness; D.2.4 Model checking 
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Chapter 1 
Introduction 



1.1 Why DO WE NEED DEPENDENCE? 

One of the purposes of formal logic is to aid in the translation of facts from 
natural language into mathematical language. Consider, for example, the 
following sentence: 

"There are evil hackers." 
This could be translated to the first-order formula 

3 J (evil(x) A hacker(x)). 
Now one coiild make the claim 

"Every hacker named Eve or Mallory is evil." 
And again we can translate to first-order logic: 

Vj ^(hacker(x) a (Eve(x) v Mallory (x))) ^evil(x)^ 

A more general claim of this sort is the following: 

"The degree ofevilness of someone is determined hy his/her name." (1.1) 

But now we have a problem when translating to first-order logic since the 

concept of some arbitrary dependence or determination is not expressible in 
common first-order logic. We can state a fully specified dependence as above 
where we know that hacker together with Eve or Mallory implies evil. But when 
we only know that there is a dependence between variables or terms but do 
not know its details, i. e. in this case which names belong to which grades of 
evUness, then first-order logic is not expressive enough. 
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In first-order logic, dependence between variables is determined by the 
order in which the variables are quantified - and therefore is always linear. 
For example, when using game theoretic semantics to evaluate the formula 

Vxo3XiVX23X3 (p, 

the choice for xi depends on the value of xq and the choice for X3 depends on 
the value of both universally quantified variables xq and X2- What we need is 
the possibility to express non-linear dependencies between variables - which 
cannot be expressed in first-order logic (J-O). 

The first step in this direction was taken by Henkrn IIHen61l with his 
partially-ordered quantifiers 



Vxq 3xi 
Vx2 3x3 



cp, (1.2) 



where Xi depends only on Xg and X3 depends only on X2. 

The second step was taken by Hintikka and Sandu [HS89' 'Hin961 who 
introduced independence-friendly logic {IJ-) which extends J-O in terms of 
slashed quantifiers. For example, in 

Vxo3XiVX23X3/Vxo (p 

the quantifier 3X3/VX0 means that X3 is independent of xq in the sense that a 
choice for the value of X3 should not depend on what the value of xq is. The 
semantics of IJ- was first formulated in game theoretic terms and therefore 
IJ- can be regarded as a game theoretically motivated generalization of J^O. 
Whereas the semantic game of J-O is a game of perfect information, the game 
of IJ- is a game of imperfect information. Later, the team semantics of IJ-", 
also used in this thesis, was introduced by Hodges rHo d97a[|Hod97bl . 

Dependence logic {T>), introduced by Vaananen | Vaa07|, is inspired by IT- 
logic, but here the dependencies between variables are written in terms of 
atomic dependence formulas. For example, the partially-ordered quantifier 



(1.2 1 can be expressed in dependence logic as 

VXo3XiVX23X3 ( = (X2, X3) A (p). 

The atomic formula =(x2, X3) has the explicit meaning that X3 is completely 
determined by X2 and nothing else. For Xi on the other hand we do not need 
a dependence atom since it is quantified before X2 and therefore automatically 
completely determined by xq alone. In general, functional dependence of 
the value of a term tn from the values of the terms fi, . . . , fn-i, denoted 
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by =(fi, . . . , i/i-i, tn), states that there is a function, say /, such that t„ = 
f{ti, . . . , i„_i) holds, i. e. the value of t„ is completely determined by those of 

First-order logic with partially-ordered quantifiers, independence-friendly 
logic and dependence logic are all conservative extensions of first-order logic, 
i. e. they agree with J-O on sentences which syntactically are J-^O-sentences, 
and are expressively equivalent to existential second-order logic {£SO) IIEnd70[ 
[Wal70,Hod97b , Vaa07J. 

Hence, reconsidering our hacker example we can formalize it in any 
of the above extensions of first-order logic. In dependence logic we can write 
it as 

Vx3i/3z (y = eviLness(x) a z = name(x) a ={z,y)), 

in TJ^ as 

Vx3z3i//Vx (y = evilness(x) a z = name(x)) 
and with a partially -ordered quantifier as 

(y = evilness(x) a z = name(x) 

A y' = evilness(x') a z' = name(x') 
A z = z' ^ y = y'). 

Note that although the statement can be expressed in all three logics its 
formulation is not equally intuitive in each one of them. With partially- 
ordered quantifiers we have to introduce additional variables (which are later 
identified with one another) and in XJ- we have to arrange the quantifiers in 
a specific order whereas in T) we do not have any of such restrictions. 

1.2 The nature of dependence 

Of course, dependence does not manifest itself in a single world, play, event or 
observation. Important for a dependence to make sense is a collection of such 
worlds, plays, events or observations. These collections are called teams. They 
are the basic objects in the definition of the semantics of dependence logic. 
A team can be a set of rounds in a game. Then = (xi, . . . , x„_i, x„) intuitively 
states that in each round move x„ is determined by moves xj, . . . , x„_i. A 
team can be a database. Then =(xi, . . . , x„_i, x„) intuitively states that in 
each line the value of attribute x„ is determined by the values of attributes 
xi, . . . ,x„_i, i. e. x„ is functionally determined by xi, . . . ,x„_i. 



/ Vx 3y 3z \ 
I Vx' 3y' 3z' ) 
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More formally, in first-order logic a team X is a set of assignments and 
= {xi, . . . , x„_i, x„) states that in each assignment the value of x„ is determined 
by the values of xi, . . . , x„_i, i. e. there is a function / : A"^^ A (where A 
is the imiverse of a first-order structure) such that for all s e X it holds that 
s{x„) = /(s(xi), . . .,s(x„_i)). Dependence logic (D) is defined by simply 
adding these dependence atoms to usual first-order logic I Vaa07J and is a 
conservative extension of the latter. 

In modal logic a team is a set of worlds in a Kripke structure and ={pi, . . . , 
Pn-irPn) states that in each of these worlds the value of the propositional 
variable pn is determined by the values of pi, . . . , Pn-i> i- e. there is a Boolean 
function /: {T, _L}"^^ {T, -L} that determines the value of p„ from the 
values of pi, . . . , Pn-i for all worlds in the team. Modal dependence logic 
{A4T>C) is the conservative extension of modal logic defined by introducing 
dependence atoms to modal logic BVaaOSI . 



1.3 Computational complexity 

In this thesis we will investigate fragments of first-order as well as modal 
dependence logic from a computational point of view, i. e. we will determine 
the difficulty of computational problems involving logical formulas. Naturally, 
the question that arises is: What, precisely, do we mean by difficulty? To answer 
this question we use methods from the field of computational complexity 
which will be introduced in the following. 

When designing an algorithm to solve a problem, it is, of course, important 
whether your algorithm needs to run a minute or a year to solve the problem. 
If you have only one problem to solve you can simply specify the ressources 
needed by the algorithm by noting its runtime and the memory space it uses. 
But now imagine that you are designing an algorithm to solve a type of 
problems, e. g. an algorithm to compute the fastest car route from city A to city 
B. Now the time and space needed by the algorithm depend on the distance 
between the two cities, the number of citites in between them and many other 
things. 

One way to specify the time and space of a generic algorithm is to express 
the worst-case runtime and memory space needed by the algorithm as a 
fimction of the size of the given problem. Here, size can, for example, mean the 
number of nodes in a graph, the number of rows in a database or the number 
of streets on a map that includes both city A and city B. The computational 
complexity of a problem type can then be specified by finding an optimal 
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algorithm to solve it and examining the algorithm's worst-case time and space 
needs as a function of the input size. 

The probably most important complexity class definable in this way is the 
class P of all problems for which there is an algorithm solving them whose 
rimtime is bounded by a polynomial in the input size. Another important 
class is EXP which is defined analogous to P but instead of a polynomial 
function there only has to be an exponential function for the runtime bound. 

For these two classes (as for many other pairs of classes) there is a funda- 
mental difference between the complexity of a problem A in class P and a 
problem B in class EXP. Assume, for example, that for a given input size the 
optimal algorithms for both problems can compute a solution in one minute. 
Now, if we increase the input size by one unit, the algorithms for the problems 
will, for example, both take two minutes. But if we further increase the input 
size by one more unit then problem A will typically be solved in three minutes 
while problem B will take four minutes. And by each further incrementation 
of the input size, problem A will take one more minute while the time needed 
to solve problem B will double. So the latter has a fundamentally worse 
asymptotic runtime than the former. 

This example demonstrates that a single complexity class typically covers a 
wide range of concrete runtime or space usage functions and that the differ- 
ences between two classes are usually of a fundamental nature which cannot 
be eliminated by simply using faster computers or optimized algorithms. 

1.4 Modal dependence logic 

Vaananen pVaaOS | introduced both an inductive semantics and an equivalent 
game-theoretic semantics for modal dependence logic. Sevenster ISev09ll 
proved that on singleton teams, i. e. teams which contain only one world, 
there is a translation from M.T>C to usual modal logic while on arbitrary 
teams there is no such translation. Sevenster also initiated the complexity- 
theoretic study of modal dependence logic by proving that the satisfiability 
problem oi M.T>C\s complete for the class N EXP of all problems decidable by 
a nondetermrnistic Turing machine in exponential time. 

In this thesis, we continue the work of Sevenster by presenting a more 
thorough study on complexity questions related to M.T>C. We will system- 
atically investigate fragments of AiVC by restricting the propositional and 
modal operators allowed in the language. This method of classifying the com- 
plexity of logic related problems goes back to Lewis who used this method 
for the satisfiability problem of propositional logic llLew79ll . Recently it was. 
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for example, used by Hemaspaandra et al. for the satisfiability problem of 
modal logic [Hem05 HSSIO | and by Meier et al. for the satisfiability problem 
of temporal logic [MMTV09|. The motivation for this approach is that by a 
systematic study of all fragments of a logic one might find a fragment with 
efficient algorithms but still high enough expressivity to be useful in practice. 
On the other hand, this systematic approach usually leads to insights into 
the sources of hardness, i. e. the exact components of the logic that make 
satisfiability, model checking, etc. hard. 

We follow the same approach here. We consider all subsets of modal 
operators □, and propositional operators a, v, ^ (atomic negation), T, _L 
(the Boolean constants true and false), i. e. we study exactly those operators 
considered by Vaananen [Vaa08|, and each time examine the satisfiability 
problem and the model checking problem of A4T>C restricted to formulas 
built only by operators from the chosen subset. Here, by satisfiability we mean 
the problem where a formula is given and the task is to decide whether there 
is a Kripke structure satisfying the formula. By model checking we mean the 
problem where a formula, a Kripke structure and a team are given and the task 
is to decide whether the Kripke structure and the team satisfy the formula. 

We also extend the logical language of [ Vaa08 1 by adding classical disjunc- 
tion (denoted here by ®) besides the usual dependence disjunction. Con- 
nective ® was already considered by Sevenster (he denoted it by •), but not 
from a computational point of view. Furthermore it seems natural to not only 
restrict modal and propositional operators but to also impose restrictions on 
the dependence atoms. We consider one such restriction, where we limit the 
arity of the dependence atoms, i. e. the number n of variables pi, ■ ■ ■,pn by 
which q has to be determined to satisfy the formula =(pi, . . . , Pn, cj), to a fixed 
upper bound k^Q (the logic is then denoted hy AADC]^ ). 

We include both, the classical disjunction and the arity restricted depen- 
dence atoms, into the set of operators which we systematically restrict. Then 
we analyze the complexity of the satisfiability problem and the model check- 
ing problem of AiVjC and AiVLj^ for all subsets of operators studied by 
Vaananen and Sevenster. 

1.5 INTUITIONISTIC DEPENDENCE LOGIC 

In classical logic (modal as well as first-order and propositional) there is a 
well-defined canonical notion of implication which is defined by interpreting 
<p ^ xp as a shortcut for ^cp v ip. In dependence logic, however, there is no 
such canonical notion. The reason for this is that ^cp is not well-defined for an 
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arbitrary formula (p since negation is only atomic in dependence logic. It is, of 
course, possible to define arbitrary negation ^(p to mean the dual formula (p'^ 
obtained from by pushing the negation down to the atomic level by use of 
de Morgan's law. 

However, when using this syntactically-defined non-atomic negation the 
obtained notion of implication misses some of the usually desired properties. 
For example, it is possible that in a team neither <p nor ip holds but neither 
does the formula ^cp v xp. Therefore Abramsky and Vaananen [ AV09II have 
investigated two other notions of implication, namely linear implication —o and 
intuitionistic implication The latter satisfies axioms of rntuitionistic logic 
and is defined hy cp^ ip being satisfied in a team iff in all subteams where cp is 
satisfied it also holds that ip is satisfied. 

Yang [Yanll | proved that first-order dependence logic extended by intu- 
itionistic implication has the same expressive power as full second-order logic 
on the level of sentences. Additionally, this still holds for the fragment called 
intuitionistic dependence logic {IVjC) which only uses quantifiers, a, ®, 
and dependence atoms, i. e. it misses v . 

In this thesis we consider modal dependence logic extended with intuitionis- 
tic implication, called modal intuitionistic dependence logic (AilVjC). We follow 
the same approach as for AAV C and investigate the computational complexity 
of the model checking problem of fragments of M-XDC obtained by using 
only subsets of the operators. Amongst others we discuss a natural variant 
of first-order XD£, namely propositional intuitionistic dependence logic (VIVC) 
which in our setting can be identified with without modalities and 

without disjimction v . 

1.6 Two-variable logic 

The satisfiability problem of first-order logic TO was shown to be undecidable 
in IIChu361lTur36 l and, ever since, logicians have been searching for decidable 
fragments of J^O. Henkrn IIHen671 was the first to consider the logics J-O'^, 
i. e. the fragments of first-order logic with only k variables. The fragments 
J^O'^ for A: > 3 were easily seen to be undecidable but the case for k = 2 
remained open. Earlier, Scott LSco62 1 had shown that J-O^ without equality 
is decidable and then Mortimer |Mor75l extended the result to J-O^ with 
equality and showed that every satisfiable J-O'^ formula has a model whose 
size is at most doubly exponential in the length of the formula. His result 
established that the satisfiability and finite satisfiability problems of J-O^ are 
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contained in NEEXP. Finally, Gradel, Kolaitis and Vardi IIGKV97I unproved 
the result of Mortimer by establishing that every satisfiable TO^ formula has 
a model of exponential size. Furthermore, they showed that the satisfiability 
problem of TO^ is NEXP-complete. 

Since then, the decidability of the satisfiability problem of various extensions 
of Td^ has been studied (e. g. llGOR97bl lG^9l IE VW02I KOOSil ). One such 
extension, TOC^, is acquired by extending TO^ with counting quantifiers 
3^*^. The meaning of a formula of the form z\'^^x <p{x) is that (p{x) is satisfied by 
at least k distinct elements. The satisfiability problem of the logic J-OC^ was 
shown to be decidable by Gradel et al. fGOR97a | and shown to be in NEEXP 
by Pacholski et al. |PST97|. Finally, Pratt-Hartmarm LPH05J established that 
the problem is NEXP-complete. 

In this thesis we study the decidability and complexity of the satisfiability 
problems for the two-variable fragments of independence-friendly logic and 
dependence logic. For this purpose we will use the result of Pratt- Hartmann to 
determine the complexity of satisfiability for two-variable dependence logic. 



1,7 Results 



In Section 



4.1 



we completely classify the complexity of the satisfiability prob- 
lem of all fragments oi MT^C defined by taking only some of the operators 
and constants □, 0/ a, v, ®, ^, T, _L and =(•). 

One of our main and technically most involved contributions addresses 
a fragment that has been called Poor Man's Logic in the literature on modal 
logic IHemO l \, i. e. the language without disjimction v . We show that for un- 



boimded arity dependence logic we still have full complexity (Theorem 4.5 1, 



i. e. we show that Poor Man's Dependence Logic is NEXP-complete. If we also 
forbid negation then the complexity drops down to ^2^= NP^^), i. e. Mono- 
tone Poor Man's Dependence Logic is -complete (Theorem 4.4 but note 
that we need ® here). And if we, instead of forbidding negation, restrict the 
logic to only contain dependence atoms of arity less or equal k for a fixed 

5= 3 then the complexity drops to 2^3 (= NP^z), i.e. bounded arity Poor 
Man's Dependence Logic is -complete (Corollary 4.10 



All of our complexity results are summarized in Table 4.1 for dependence 
atoms of imbounded arity and in Table 4.2 for dependence atoms whose arity 
is bounded by a fixed A: > 3. 



1.7 Results 



9 



In Section |4!2| we classify the complexity of the model checking problem of 
fragments of A4T>C with unboimded as well as bounded arity dependence 
atoms. For plain modal logic this problem is solvable in P as shown by 
Clarke et al. |CES86|. A detailed complexity classification for the model 
checking problem over fragments of modal logic was given by Beyersdorff et 
al. |BMM^ 11 1 (who investigate the temporal logic CTC which contains plain 
modal logic as a special case). 

In the case of AiVC it turns out that model checking is NP-complete in 
general and that this still holds for several seemingly quite weak fragments 
of M-DC, e. g. the one without modalities or the one where nothing except 
dependence atoms and is allowed. Interestingly, this also holds for the case 
where only both disjimctions v and ® are allowed and not even dependence 
atoms occur. 

We are able to determine the tractability of each fragment except the one 
where formulas are built from atomic propositions and unbounded depen- 
dence atoms only by dependence disjunction and negation. In each of the 
other cases we either show N P-completeness or show that the model checking 
problem admits an efficient (deterministic polynomial time) solution. 

For the restriction to bounded arity dependence atoms, model checking 
remains NP-complete in general but for the fragment with only the operator 
allowed this does not hold any more. In this case either a or v is needed to 
still get NP-hardness. 



In Table 4.3 we list all of our complexity results for the cases with un- 



bounded arity dependence atoms and in Table 4.4 for the cases with bounded 
arity. 

In Chapter|5]we extend our classification from Section |4!2| to include intu- 
itionistic implication into the set of operators, i. e. we study the complexity of 
model checking for AAXDC and its fragments. We prove that model check- 
ing for MXVC in general is PSPACE-complete but for the AilV jC fragment 
where formulas are not allowed to contain or v the problem turns out to be 
coNP-complete. In particular, model checking for VTT>C is coNP-complete. 
Our detailed results are listed in Table 15. II 



In Chapter |6] we examine the expressiveness, satisfiability and finite satisfi 
ability for bounded-variable XJ-'-logic and dependenc e log ic. We show that 
there is an e ffect ive translation from Tfi- to TJ-^ (Lemma |6.l| and from XJ^^ to 
T)^ (Lemma 
(Proposition 



6.2 1. We also show that XF^ is strictly more expressive than T>^ 
This result is a by-product of our proof that the satisfiability 



6.5 



problem of XJ- is undecidable (Theorem 6.19 shows Tl'j^-completeness). The 



proof can be adapted to the context of finite satisfiability, i. e. the problem of 
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determining for a given fo rmula cp whether there is a finite structure 21 such 
that 21 1= holds (Theorem 



6.23 



shows Sj- 



-completeness). The undecidability 
proofs are based on tiling arguments. Finally, we study the decidability of the 
satisfiability and finite satisfiability problems of 2?^. For this purpose we re 
duce the problems to the (finite) satisfiability problem of TOC^ (Theorem 
and thereby show that they are NEXP-complete (Theorem 6.25| . 



6.24 



1.8 Publications 



Section 



4.1 



is based on |LV101 - although Section 4.1.3 about the boimded 
arity cases is new. Section 
of the 



4.2 



is based on | EL12 J - while the investigation 
operator is new (Section 4.2.3 and new version of Theorem [4.24^ . 
Chapter|5]contarns unpublished work with Fan Yang and Johannes Ebbing. 
Finally, Chapter |6] is based on IIKKLVIIJ - while Theorem 6.11 and the proofs 
in Section 16.2.1 1 are new. 



Chapter 2 
Preliminaries 



2.1 Predicate logic 

We assume familiarity with the basic notions of first- and second-order logic 
and thus will not explain what a vocabulary or a structure is. The interested 
reader may refer to any introductory logic textbook, e. g. IIEFT94II . We will, 
however, restate the semantics of first-order logic in terms of team semantics 
since this will be used in the next chapter to define the semantics of (first-order) 
dependence logic. 

First, let us quickly recall the sjmtax of first-order logic. 

Definition 2.1 (Syntax of first-order logic). Let t be a first-order vocabulary, 
ti, ■ . ■ ,tn arbitrary t- terms, R an arbitrary relation symbol in t (of arity n) and 
X an arbitrary first-order variable. Then J^O is the set of all formulas built by 
the rules 

,p ::= T I 1 I R{h t„) \ ^R{h t„) \ h = t2 \ = \ 

(p A. (p I (p V (p I 'ix(p I 3xcp. 

J 

Note that w. 1. o. g. we only define formulas in negation normal form. The 
rationale for this will become clear in the next chapter when we see that for 
dependence logic we have to use negation normal form since negation is only 
properly defined for atomic formulas. 

To define team semantics we first introduce the concept of a team. Let 21 be 
a model (or structure) with domain A (in the future, we will assume that if 21 
(resp. S, £,...) is a model then A (resp. B, C,. . . ) is its domain). Assignments 
over 21 are finite functions that map variables to elements of A. The value 
of a term f in an assignment s is denoted by f '^^s). If s is an assignment, x is 
a variable and a e A then s{a/x) denotes the assignment (with the domain 
dom(s) u {x}) which agrees with s everywhere except that it maps x to a. 
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Let {xi, . . . , X]^} he a finite (possibly empty) set of variables. A team X of A 
with domain dom(X) = {xi, . . . , Xj-} is a set of assignments from the variables 
{xi, x^} into A. We denote by rel(X) the A:-ary relation of A corresponding 
toX: 

rel(X) :={(s(xi) s{x^))\ssX}. 

If X is a team of A and F : X ^ A, we use to denote the team 

{s{F{s)/x) I s 6 X} 

and for the team 

{s{a/x) I s e X and as A] . 

If (p and 9 are formulas and Tpisa subformula of ^ then we define (p{d/ip) to 
be the formula generated from (p by substituting all occurrences of ^ with 9. 

Definition 2.2 (Team semantics of TO). Let 21 be a model and let X be a 
team of A. The satisfaction relation 21 |=x </> is defined as follows: 

• If is an atomic formula then 21 |=x <p iff for all s e X: 21, s \= (p (in the 
usual single-assignment based semantics). 

• If t/; is atomic then 21 |=x iff for all s e X: 2t, s ^ i/j. 

• 21 hx ^ ^ iff 2t hx 'Z' and 21 hx ^■ 

• 21 |=x i/j V ^ iff there exist teams Y and Z such that X = Y u Z, 21 |=y \p 
and 21 |=z ^. 

• 21 |=x ^x\p iff 21 \=x{F/x) ^ fo^^ some F: X ^ A. 

. 2lhxVxi/^iff2tHx(A/x) 

Above, we assume that the domain of X contains Fr((^), i. e. it contains all 
variables occurring in ^ outside the scope of a quantifier. Finally, a sentence (p 
is true in a model 21 (21 1= i^) iff 21 h{0} 'P holds. ^ 

Remark 2.3. Note t/zat this team semantics coincides with the usual single-assign- 
ment based semantics for first-order logic, i. e.for all structures % formulas cp e J^O 
and assignments s : Fr(^) —>■ A it holds that 

21 Hh'/' iff '^^s^TO'P- 

For second-order logic we assume the usual single-assignment based se- 
mantics and only recall the syntax here. 
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Definition 2.4 (Syntax of second-order logic). The syntax of SO extends the 
sjmtax of J^O by the rules 

(p ::= 3S^ I \/S(p, 

where S is a second-order variable, i. e. it is interpreted by a relation (with 
an a priori given arity) and used in the inner formula as if it belonged to the 

vocabulary. ^ 
The following fragment of <SO will be of special interest. 

Definition 2.5 (£SO). Existential second-order logic (£SO) consists of all SO- 
formulas that are of the form 3Rx • ■ ■ for a FOAoxmvla (p. ^ 

2.1.1 Fragments of first-order logic 

For first-order logic we also investigate fragments where only a fixed number 
of names for variables are allowed inside a formiila. 

Definition 2.6 (J^O^). Let > and t a relational vocabulary, i. e. t does not 

contain function or constant symbols. Then k-variable first-order logic {J^O^) is 
the set of all J^O-formulas that contain no more than k distinct variables (we 
will usually use xi,...,X}^ and in the case = 2 we use x and y). ^ 

Note that the above definition does not forbid requantification of variables, 
e. g. '3xly{Pxy a 3xQxy) is in FO^. 

In common first-order logic there are only two quantifiers, one asking about 
the existence of at least one element with a certain property and the other one, 
the dual, stating that the property holds for all elements, i. e. its complement 
holds for less than one element. 

A natural generalization of this is the introduction of counting quantifiers 
asking about the existence of at least k pairwise-different elements. It is 
possible to define for any fc e N with the ordinary 3 quantifier by the 
translation 

k 

3^''x^{x) ^ 3xi...3xk{ /\ Xi^ Xj A /\^{xi)). 

i,ie{l,...,k}, i=l 

In the case of J-O^ it is, however, no longer possible to define 3^'^+^. There- 
fore we wUl investigate the following extension of J^O^. 



14 



Chapter 2 Preliminaries 



Definition 2.7 (J^OC^). A:-variable first-order logic with counting {J^OC^) is 
the extension of J-O^ obtained by allowing the counting quantifiers (for 
all e N) as well as their negations 3*^^. ^ 

For an introduction into bounded-variable first-order logic with counting 
we refer to llOtt97l . 



2.2 Modal logic 

We will only briefly restate the definition of modal logic here. For a more 
in-depth introduction the reader may refer to lBdRV02| . 

Definition 2.8 (Syntax of modal logic). Let PROP be an arbitrary coimtable 
set (of atomic propositions). Then is the set of all formulas (p built by the 
rules 

(|)::=T I 1 I p I I </)A,/) I <^v<|) I \ O'p, 

where p e Prop. 

CC {classical logic) is the set of all formulas of A4C that neither contain □ nor 
operators, i. e. CjC is the set of all purely-propositional Boolean formulas. ^ 

We sometimes write d'^ (resp. O'^) for DD^ . . □ (resp. 00 ^. . ). Note that we 

k times k times 

have defined T and _L as parts of the language although we could equivalently 
have defined them as abbreviations for p v and p a ^p, respectively. The 
rationale for this is that we will forbid negation and/ or disjunction in parts of 
Section l4T] but still want to allow the constants. 

Note that we define negation to be only atomic, i. e. it is only defined for 
atomic propositions. Although in the literature negation is usually defined 
for arbitrary formulas, our definition is in fact not a restriction of this general 
case. This is due to the fact that arbitrary negation can be defined in terms of 
dual formulas by 

^<p ■■= cp^, 

where dual formulas are defined as follows. 
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Definition 2.9 (Dual fonnulas). Let ^ e M.C. Then the dual of a formiila is 
defined by the following translation ^ ^ cp^: 





T 

1 




1 

_L 




1 


1 — > 


T 




p 


1 — > 








1 — > 


p 




aO 


1 — > 


!/^'^ V 






1 — > 


Xp'^ A 




ntp 


1 — > 


Ot/''* 






1 — > 





Note that an analogous defintion of dual formulas can be given for first- 
order formulas. ^ 

We will define the semantics of M.C via a translation to J^O^. 

Definition 2.10. We define a translation ^ >->■ ^{x) from M.C to J^O^ as fol- 
lows: 



T 


1 — > 


T 




1 


1 — > 


1 




P 


1 — > 


Fix) 




-V 


1 — > 


^P{x) 




xp aO 


1 — > 


lp{x) A 0{x) 




ipv0 


1 — >■ 


ip{x) V 0(x) 




a^p 


1 — > 


^y{R{x,y)^xp(y)) 


O^P 


1 — > 


3y (i?(^/y) A 





Note that if ^ is a A^£-formula over the atomic propositions PROP = {pi, p2, 
. . .} then ^ is a J^C^-formula over the vocabulary TpjjQp := {R, Pi, Pj, ■ ■ ■}■ 

Definition 2.11 (Team semantics of modal logic). Let cp e MC, 2t a Tpj^Qp- 
structure and T c A a team. Then we say that 21 in T satisfies (p {%T \= cj)) if 
and only if 21 |=x ^{x) where X := {{x i-^ a} \ a e T}, i. e. X is the first-order 
team that has one unary assignment {x ^^ a} for each element a in T. ^ 

Note that in the above definition we still call T a team of 21 although it is a 
set of elements rather than a set of assignments. 

The structure 21 is often expressed in the form of a Kripke structure {or frame) - 
which is nothing else then a first-order xpj^Qp-structure with a special notation 
for representing the unary relations. 
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Definition 2.12 (Kripke structure). Let PROP be a countable set of atomic 
propositions. Then a PROF-Kripke structure is a tuple K = {S,R,n) where 
S is an arbitrary non-empty set of worlds or states, _R c S x S is the accessibility 
relation and n: S ^ *P(Prop) is the labeling function. ^ 

The corresponding first-order Tpj^Qp-structure K has universe S and con- 
tains the binary relation R and the imary relations Pi,P2,- ■ ■ defined by 
Pi ■= {s I Pi e 7r(s)}. 

Note that this team semantics via translation to first-order logic coincides 
with the usual single-assignment non-translational semantics for modal logic, 
i. e. for all Kripke structures K = {S, R, n), formulas (p e AiVC and worlds 
s e S it holds that 

X,{s}h<?' iff K,s^MC(l>- 
For any team T of a Kripke model K, we define 

R(T) = {s e X I 3s' e T such that (s',s) e R}. 

In the case that T = {s}, we write K(s) instead of K({s}). Elements in R(s) are 
called successors of s. Furthermore we define 

<T>R = {T' I T' c R(T) and for all s e T with K(s) ^ 0: R{s) nT' ^ 0}. 

If R is clear from the context we sometimes just write (T). Elements in (T) 
are called successor teams. Clearly, R{T) e (T). 

2.3 Complexity theory 

We assume familiarity with the basic notions from computational complexity 
theory. An introduction to this can, for example, be found in [AB09J or in 
]Pap94) . We will just briefly recall the relevant complexity classes and results. 

2.3.1 Important classes 

Definition 2.13 (P, NP, PSPACE, EXP, NEXP). P (resp. NP) is the class of 
all (decision) problems, i. e. "yes-or-no-questions", solvable by a deterministic 
(resp. non-deterministic) Turing machine in polynomial time. Analogously, 
EXP (resp. NEXP) contains all problems solvable (non-)determrnistically in 
exponential time and PSPACE contains all problems solvable in polynomial 
space. J 
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Definition 2.14 (PH, L^, n^, AP). The polynomial hierarchy is defined as 



00 

PH := U 



with 



yP ._ TiP ._ p 



SP^j := NP^* and 
nP_^i := coNP^', 

where N P'' describes the class of all problems solvable by a non-deterministic 
oracle Turing machine, using a problem from class C as oracle, in polynomial 
time and 

A e coC iff A := {x \ X A} e C. 



Equivalently PH can be defined as the class of all problems for which there 
is an alternating Turing machine which decides the problem in polynomial 
running time and for which there is a A: e N such that for all inputs x the 
machine does not alternate between guessing modes more than k times when 
started with input x. Note that the maximum number of alternations, k e N, 
is arbitrary but fixed for the problem and thus must not depend on the input 
given to the machine. If this restriction is dropped we get the class AP of 
all problems for which there is an alternating Turing machine deciding the 
problem in polynomial running time. In iCKSSlI it was shown that AP = 
PSPACE. J 

Definition 2.15 (LJ, IlJ, decidable). is the class of all decision problems A 
for which there is a Turing machine that, given input x, holds in an accepting 
state if X e A and runs infinitely long if x ^ A. TlJ is defined as coJL^. 

A problem is said to be decidable iff there is a Turing machine that solves 
it, i. e. for all inputs it holds with the correct answer after a finite number of 

computation steps. ^ 

Figure [O] shows an inclusion diagram of all of the above complexity classes. 

We will later need the complexity operator 3-. If C is an arbitrary complexity 
class then 3-C denotes the class of all sets A for which there is a set B e C and 
a pol5momial p such that for all x, 

xeA iff there is a y with lyl and e B. 
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Note that for every class C,3-C c NP . However, the converse does not hold 
in general. We will only need the following facts: 3-coNP = Ej, 3-112 ^ ^3' 
3 PSPACE = PSPACEand 3 NEXP = NEXP. 

2.3.2 REDUCIBILITY AND COMPLETENESS 

Definition 2.16. Let C be a countable set and A, B c C. Then A is polynomial- 
time many-one reducible to B, in symbols A sgj^ B, iff there is a reduction function 
f:C—^C such that / is computable in polynomial time and for all x e C it 
holds that xeAiff f{x) e B. 
We write A B iff both A < ^ B and B A hold. 

Note that most complexity classes C with P c C are closed under i. e. if 
A B and B e C then also A e C. This holds for all classes relevant to us. 

Definition 2.17. Let A be a computational problem and let C be a complexity 
class with P c C. Then A is called C-liard (w. r. t. ^^-reductions) iff for all 
B 6 C it holds that B <^ A. A is called C-complete (w. r. t. ^^-reductions) iff 
A e C and A is C-hard. ^ 

2.4 Logical problems 

Whenever one is investigating a logic there are several basic problems which 
are naturally interesting. We will now introduce three of them - from the 
complexity theory point of view. 

2.4.1 Satisfiability 

The first of the problems is the satisfiability of a given formula, i. e. the question 
whether there exists a structure that satisfies the formula. This question for 
example arises in the context of system design - when a formula is used to 
specify certain properties and one wants to know whether there is a system 
with such properties. Also, it is often the case that many other problems 
related to a logic can be reduced to its satisfiability problem. 

Definition 2.18. If £ is a logic and its semantics, i. e. the satisfaction of for- 
mulas, is defined over a class of structures C then its satisfiability problem is 
defined as 



Problem: jC-C-Sat 



2.4 Logical problems 
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Input: A formula (p e £. 

Question: Is there a structure 2t e C such that 21 1= ^ holds? 

If C is clear from the context we just write £-Sat instead of £-C-Sat. The 
finite satisfiability problem £-FinSat is the analogue of £-Sat in which we 
require the structure 21 to be finite. 

Sometimes the formal definition of the satisfaction relation entails the ne- 
cessity to not only have a structure but also an element or assignment (or a 
set of elements or assignments) from the structure to satisfy the formula. The 
question then becomes 

Is there a structure 21 e C and an element a e A / an assign- 
ment s : dom{<p) A (resp. a set T c A of elements / X of 
assignments) such that M,a \= (p / M,s \= cp (resp. M,T \= cp / 
M hx cp)? 

In the case of a set of elements / assignments it is also required that T ^ 
(resp. X ^ 0) since for all our logics it is the case that the empty set satisfies 
all formulas and hence the question would become trivial if we allowed it 

here. ^ 

The following observation will be useful in Chapter |6] 

Remark 2.19. Ifcp is a formula over the vocabulary r and 

xp:=3Ri...3R„3ft...3f„,(p 

with Ri, . . . , Rn,fi, . . . ,/m e T, then cp is satisfiable iff the second-order formula ip 
is satisfiable. 

2.4.2 Model checking 

The next problem is the model checking of a given structure for a given 
formula, i. e. deciding whether a given structure satisfies a given formula. 
This question for example arises in system verification - where it shall be 
checked if an already designed system does or does not have some specific 
properties. 

Definition 2.20. Let £ be a logic and its semantics be defined over a class of 
structures C. Then its model checking problem is defined as 



Problem: £-C-MC 
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Input: A formula (p e C and a structure 01 e C. 
Question: Does 21 satisfy ^, i. e. 21 1= (p? 

Again, if C is clear from the context we leave it out. Also, as above, it may 
sometimes be necessary to not only have a structure but also one or more 
elements from the structure. In this case these elements are part of the input, 
i. e. they have to be given together with the structure when the question is 

asked. ^ 

2.4.3 Expressiveness 

The last of our problems is expressiveness. This makes most sense in comparing 
two logics C and C. In this case the question is whether every property 
definable in one logic is also definable in the other. More formally we have 

the following definitions. 

Definition 2.21. Let (p and be two formulas with their semantics defined 
over the class of structures C. We say that \p va a logical consequence of <p, in 
symbols ip,i& for aU structures 21 e C it holds that 

OL\=(p implies Ol\=ip. 

We say that (p and tp are logically equivalent (in C), in symbols (p^-\p, iii<p ^ xp 
and <p ^ip. J 

Definition 2.22. Let £ and C be two logics with their semantics defined over 
the classes of structures C and C with C c C'. Then we say that £ is reducible 
to £' (£ ^ £') iff for aU formulas (p e C there is a formula jp s C such that 
(p^ip (in C) holds. 
We say that £ and £' are equivalent (£ = £') iff £ ^ £' and C ^ C hold. 

And we write £ < £' iff both £ ^ £' and £' ^ £ hold. ^ 

For extensions of first-order logic we usually restrict our attention to sen- 
tences when dealing with expressiveness, e. g. FO only means the set of 
first-order sentences in this context and not the set of all first-order formulas. 

One could think that showing equivalence of two logics £ and £' would 
also show that their model-checking and satisfiability problems are of the 
same complexity. Unfortunately, this is not always the case, i. e. it is possible 
that £ = £' but £-Sat #p £'-Sat and/or £-MC #p £'-MC. This is caused 
by a possible blow-up in translating from one logic to the other. 
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Figure 2.1: Diagram of complexity class inclusions 
Dashed lines mark "c" inclusions and solid Hnes mark "g" inclusions. 
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3.1 First-order dependence logic 

In this thesis, the semantics of V and IJ- are both based on the concept of 
teams. For IJ-, we follow the exposition of [ |CDJ09J and the recent monograph 
BMSSlll . 

Definition 3.1 (Syntax of XJ-). The syntax of IJ- extends the syntax of J-O 
by the rules 

(p ::= 3x/W(p \ ^x/Wcp, 

where x is a first-order variable and W a finite set of first-order variables. The 
quantifiers are called slashed quantifiers in this case. ^ 

Definition 3.2 (Syntax of "D, [ iVaa07l ). The sjmtax of V extends the syntax of 
J-O by the rules 

cp ::= =(^ti,...,tn) I ^ = {h,---,tn) I </'®<^', 

where ti, . . . ,t„ are terms. An atomic formula of the form ={ti, . . . ,t„)is called 
dependence atom and in this thesis the terms f, will mostly be plain variables. 

The arity of a dependence atom = (xi, . . . , x„_i, x„ ) is defined as n — 1, 
i. e. the arity of a dependence atom is the arity of the determinating function 
whose existence it asserts. 

In the following chapters we usually denote by T> the above logic but 
without the ® operator The ve rsion that includes ® is primarily used for the 

translations in Definition [ 



3.11 



Note that we could have defined negation to be arbitrary and not only 
atomic. A sentence that is not in negation normal form could then be evaluated 
by first pushing the negations down to the atomic level by using de Morgan's 
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law and other well-known rules. However, as we will see in Section [3.1.1| non- 
atomic negation would be purely syntactical and not semantical {semantical 
meaning that is satisfied iff cp is not satisfied) - whereas for plain first-order 
logic the syntactical and semantical notions coincide. 

For a set W c dom(X) we call F W -independent (resp. W -determined) if for 
all s, s' 6 X with s(x) = s'(x) for all x e dom(X)\W (resp. for all x e W) we 
have that F(s) = F(s'). 

Definition 3.3 (Semantics of and IT, lHod97allVgg07l ). Let 21 be a mo- 
del and X a team of A. For IJ- the satisfaction relation 2t |=x (p from Defini- 
tion 



2.2 is extended by the rules 



• 2t |=x ^x/W(p iff 21 \=x{F/x) 'P for some W-independent fxmction 

F: X ^ A, 

• 2lhxVx/W<^iff2lhx(A/.) ^ 
and for T) by the rules 

. i2l ={h, ■ ■ ■ , in) iff for all s, s' e X such that tf{s) = tf(s'}, 
f^_i<s> = C-i<s'> it holds that tf{s) = tf(s'), 

• 2lhx-=(ii,...,in)iffX = 0, 

• 21 hx ® iff 2t hx or 21 hx V'- 

Above, we assume that the domain of X contains Fr(^). Finally, a sentence (p 
is true in a model 2t (21 1= ^) if 21 |={0} j 

Note the seemingly rather strange semantics of negated dependence atoms. 
The rationale for this, given by Vaananen | Vaa07, p. 24], is the fact that if we 
negate dependence atoms and maintain the same duality as between positive 



and negative first-order literals (cf . Definition 2.2 1 we get the condition 



Vs,s' 6 X: tf(s} = tf(s'} C-i<s> = fn-i<s'> 

and tf(s)^tf(s') 

and this is only true if X = 0. 

Above, we denote dependence disjunction instead of classical disjunction with 
V because the semantics of dependence disjunction is an extension of the 
semantics of usual first-order disjunction and thus we preserve downward 
compatibility of our notation in this way. However, we still call the ® oper- 
ator "classical" because in a higher level context - where our sets of states 
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are viewed as single objects themselves - it is indeed the usual disjunction, 
cf. IIAV09I . Note that 

(p&lp ^ (p V Tp 

holds but not the other way around. 



3.1.1 Basic PROPERTIES OF X> AND XJ" 

Now we will state some basic properties of V and IJ-. 

First we will see that the game theoretically motivated negation — ■ of 2? and 
IJ- does not satisfy the law of excluded middle and is therefore not the classical 
Boolean negation. 

Proposition 3.4 (Law of excluded middle failure). Let (p := =(x), 21 a struc- 
ture with universe A := {a, b} and X := {{x ^ a}, {x ^ b}}. Then 21 ^ and 

Also, many familiar propositional equivalences of connectives do not hold 
in V and IJ-. For example, the idempotence of disjunction fails, which can 
be used to show that the distributivity laws of disjunction and conjimction 
do not hold either. We refer the interested reader to | Vaa07, Section 3.3] for a 
detailed exposition on propositional equivalences of connectives in V (and 
also IT). 

The following fact is a fundamental property of all formulas of V and IT. 

Proposition 3.5 (Downward closure property, I Vaa07 Hod97a1). Let (p be a 

formula ofV or IT, 21 a model, and Y c X teams. Then 21 |=x implies 21 |=y ^• 

As argued in ||Vaa07[ Proposition 3.10], the downward closure property suits 
the intuition that a true formula expressing dependence should not become 
false when making the team smaller, since if dependence holds in a large set 
then it does even more in a smaller set. 

A feature of T> and IT that nicely accomodates the downward closure is 
that 21 1=0 holds for all 21 and all formulas (poiV and IT . This observation 
is important in noting that for sentences cp and ip it holds that 

cp V ip ^ ^&ip. 

Vaananen rVaa07'. Chapter 6.1] and Hodges [Hod97bl have shown that the 
expressive power of sentences of V and IT coincides with that of existential 
second-order sentences: 



Theorem 3.6. V = IT = SSO. 
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Let X be a team with domain {xj, . . . , Xj.} and V c i^x\, . . . , X;,}. We denote 
by X f y the team {s f V | s e X} with domain V (here, s \ V denotes 
the restriction of the function s to the domain V). The following proposition 
shows that the truth of a D-formula only depends on the interpretations of 
the variables occurring free in the formula. 

Proposition 3.7 ( |Vaa07||CDJ09| ). Let cp e T> be any formula or cp e XT a sen- 
tence. IfV 2 Fr(^), then 21 |=x (p if and only if% \=x\v 'P- 



The analogue of Proposition 3.7 does not hold for open formulas of XT. In 
other words, the truth of an XJ-'-formula may depend on the interpretations 
of variables that do not occur in the formula. For example, the truth of the 
formula 

^:=3x/{y}(x = y) 

in a team X with domain {x,y,z} depends on the values of z in X, although z 
does not occur in (p. 

We have noted in the last chapter that for first-order formulas the usual 
single-assignment based semantics coincides with our team semantics, cf . Re- 



mark 2.3 This is not always the case for T> and XJ- formulas. 



Definition 3.8 (Flatness). Let be a 2? or an XJ- formula. Then (p is said to 
he flat iff for all structures 21 and teams X of A it holds that 

21 hx ^ iff Vs 6 X, 21 h{s} (p- 

The left-to-right implication in the above definition follows from the down- 
ward closure property (Proposition |3.5| while the other direction does not 
always hold. For plain first-order formulas, however, it does. 

3.1.2 Two-variable dependence logic 

Definition 3.9 (T>^, XT^). and XF^ are defined as restrictions of V and 
XJ- analogous to the definition of J-O^ from J-O (Definition 2.6 1. ^ 



3.2 Modal dependence logic 



Now we will introduce the syntax and semantics of modal dependence logic 
and show some important properties of it. For a more profound overview 
consult Viiananen's introduction tVaaOSI . 
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Definition 3.10 (Syntax of AiDC). The syntax of AiVC extends the syntax 
of modal logic by the rules 

■■= ={Pl>---'Vn-l,Vn) I ^ = {Vl'---'Vn~l,Pn) | ^ ® ^, 

where n 5= 1. ^ 

The semantics of MVjC will be given by a translation to V^. In the first- 
order side of the translation we do not use the usual dependence atoms but 
instead a variation of them. This is, however, not a problem since the variation 
turns out to be definable by the usual version. We follow this approach because 
it nicely demonstrates that the embedding of modal logic into two- variable 
first-order logic carries over to the respective dependence logics. 



Definition 3.11 (S eman tics of Ai'DC). We extend the translation from AiC 
to J^O' 
to V^: 



to J^O'^ (Definition IZlOl by the following rules to get a translation from AiVC 



= {Vl'---'Vn) ^ =(Pl(x),. ..,P„(x)), 

-=(pi,. . .,p„) -L, 

(p&tp ^ (p{x)&ip{x). ^ 

As stated above the resulting formula is not a strict V formula since inside 
the dependence atoms there are atomic formulas instead of terms. We can, 
however, further translate the formula by the rule 

n 

= (Pi(x),...,P„(x)) ^ 3yi...3y,i{/\{yi = c^Pi{x)) a =(yi, . . . ,y„)), 

where c is either a constant symbol from the first-order vocabulary or a vari- 
able that is existentially quantified in the beginning of the complete formula, 
i. e. its value is the same in all subformulas. 

In Chapter|4]we will investigate and classify several fragments of JVlDC. 

Definition 3.12 (M.T>Ck). MVCk is the subset of MVC that contains all 
formulas which do not contain any dependence atoms whose arity is greater 

than k. ^ 
We will classify AiVCfor all fragments defined by sets of operators. 

Definition 3.13 (MVCiM), VT>C). Let £ be a modal logic and let M be a 
set of operators and constants from the language of C Then £(M) is the 
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subset of £ containing all formulas built from atomic propositions using only 
operators and constants from M. We usually write C{opi, op2, ■ ■ ■) instead of 
£({opi,op2,---})- 

Now, W£ is defined as /AV£{a, v, ^, =), i. e. the restriction of MVC to 
formulas without modalities and without classical disjunction ®. j 



3.2.1 Basic properties of MVC 

Most properties of first-order dependence logic carry over to modal depen- 
dence logic, e. g. neither having the law of excluded middle (Proposition |3.4| 
nor the idempotence of disjunction or the fact that the empty team satisfies all 
formulas. 

Furthermore, the downward closure property (Proposition 3.5 1 holds for 
modal dependence logic as well. 

Proposition 3.14 (Downward closure property, IVaaOSI ). Let K = (S, R, n) 

be a Kripke structure, T' c T c S and <p e MVC Then W,T \= (p implies 
W,T' 

Also, the concept of flatness can be translated to modal logic in the canonical 
way. 

Definition 3.15 (Flatness). An AilVC formula (p is said to he flat if for any 
Kripke model K and any team T of K 

K,T\=(p iff VseT, K,{s}hf 

And again, analogous to first-order logic, all plain modal logic formulas are 
flat. 

Additionally, some more equivalences follow almost immediately from the 
semantics of MVC. 

Lemma 3.16. The following holds for MVC: 

a) J^py-'P, 1^ p A^p ^ ^={pi,...,p„), 

b) ={p)^p(3>^p and 

c) ={pi,...,p„) ^ V (Pi A ... A p^'-j A 

/i,...,i„_ig{T,_L} 

where p~^ := p and p^ := -■p. 



3.3 Intuitionistic dependence logic 



29 



Proof. The only difficult case is l|c|. For this note that K,T \= =(pi, . . .,pn) 
means that for all subteams T' <^ T where the evaluations of pi, . . . , are 
each constant in T', it holds that the value of p,, is also constant in T'. On the 
other hand, the right hand side of the equivalence is true in a team T if and 
only if T can be partitioned into 2"^^ subteams T" such that in each team T" 
the evaluations of pi, . . ., p„-i are as specified and the value of p„ is constant. 
Since all possible evaluations of pi, . . . , Pn-i occur in the disjunction all the 
subteams T' from above will occur as one of the teams T" and vice versa. ■ 

Note that the first-order equivalents of (|b} and (|c| do not hold - contrary to l|a}. 
Here, the crucial difference between first-order and modal logic is that in the 
latter case variables are always only Boolean; that especially means that the 
set of possible values for a variable occuring in a dependence atom is finite 
and fixed. 



3.3 Intuitionistic dependence logic 



Intuitionistic dependence logic was introduced in IIAV09I . 

Definition 3.17 (XTyC). The S5mtax of TT>C extends the S5mtax of V by the 
rule 

Here, denotes intuitionistic implication. 

For XVC the satisfaction relation from Definition 3.3 is extended by the rule 



2t |=x (/J ^ I/' iff for all Y c X with 2t |=Y it holds that 2t |=Y ^, 

i.e.cp^ipis satisfied in a team iff truth of in a subteam always implies truth 
of i/' in that subteam. ^ 

Now we introduce the modal logic version of intuitionistic dependence 
logic. 

Definition 3.18 (MXX>£). The syntax of MTVC extends the syntax of 
MVC by the rule 

The semantics of A4IV£ is defined by the extension of the translation from 



Definition 3.11 by the rule 
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All the properties of AiVjC from Section 3.2.1 hold for MIVjC as well. 
In addition, some more equivalences hold. 



Lemma 3.19. All equivalences from Lemma 3.16 hold for MIVC and also the 
following: 



a) 
b) 



= (Pi- 



3«) ^ (=(Pi) A ... A =(p„_i)) ={p„) and 



c) ip^ip = cp'^ V xp if both (p and xp are AiC formulas and (p'^ is the dual ofcp 



(of Definition 2.9 1, i. e. has a conservative semantics - in the sense that for 



M.C formulas its semantics coincides with the semantics of the usual classical 
modal logic implication. 

Note that although is equivalent to p ^ _L, of course one of ^ or _L is needed 
to achieve full MIVC expressiveness. The above lemma also shows that we 
could have equivalently defined the syntax of M-TDC without dependence 
atoms. The rationale for making the constants, the operator and the =(•) 
operator parts of the language, although we could have left out some of them 
by applying Lemma 3.19 is that we will investigate sublogics of 
where we will still use constants and negation but not always a, v and 

Finally, we define the prepositional version of intuitionistic dependence 
logic. 

Definition 3.20 (VTVC). VTVC is defined as 

A1XD£(a,®, -,^,=). 



From Lemma 3.19 we obtain the following characterizations: 



= XX2?£(a,®,1,^) and 
MTVC = MXD£(n,0, A, v,®,-,^) 
= 7WXD£(n,0, A, v,®,l,^). 

Note that VDC $ VTDC since VT>C uses dependence disjunction and 
VTVC uses classical disjunction. 

Figure [3l] shows the main modal logics considered in this thesis. 



In later chapters we will investigate the model checking and satisfiability 
problems of several dependence logics. For now we note that, as pointed out 
in Section p.4.3 the above equivalences between M.XVC fragments do not nec- 
essarily imply that the computational complexity of the problems is the same 
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MXVC 

I 

MVC 

I 1 

□ V A - =(•) ® 
I I 

VVL 

I 



VTVL 

Figure 3.1: Sublogics of MTVL 

for equivalent fragments, i. e. it is possible to have sets M 7^ M' of operators 
such that A4IP£(M) = MXVC{M') hui MTV C{M)-MC #p MXVC{M')- 
MC. This is caused by a possible exponential blow-up in translating from one 
fragment to another. 



Chapter 4 

Modal Dependence Logic 



4.1 Satisfiability 

In this section we will classify operator fragments of AiVC according to the 



complexity of their satisfiability problem, i. e. - according to Definition 2.18 
for all M c {□, <>, a, v, ®, =} and all A: > the problem 

Problem: MVC{M)-Sai {MVC,,{M) -Sat) 
Input: AXD£(M) (resp. MVC,,{M)) formula (p. 
Question: Is there a Kripke structure W and a non-empty set T of worlds 
in W such that W,T\=cj) holds? 



Note that, because of the downward closure property (Proposition 3.14^ , 



to check satisfiability of a formula (p it is enough to check whether there is a 
frame W and a single world ivmW such that W, {w} \= (p. 

Our first lemma concerns sets of operators including classical disjunction. 

Lemma 4.1. Let Mbea set ofAiVC operators. Then the following hold: 

a) Every M'DL{M u {©}) (MVC^iM u {&})) formula (p is equivalent to a 
formula 

2\<P\ 
1=1 

with xpi 6 MV£{M) (resp. MVC^iM)) for all i e {l,...,!^}. 

b) If C is an arbitrary complexity class with P c C and A^X'£(M)-Sat e C 
(MVCk{M)-SAT e C) then MVC{M u {®})-Sat e 3-C (resp. MVCk{M 
u {®})-Sat e 1-C). 
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Proof, a) follows from the distributivity of ® with all other AiVC operators. 
More specifically, (p* {ip&) cr)^{(p* \p) & {(p * a) ior * e { a, v} and \/{(p ® 
xp)^{'V(p) ® (Vcp) for V 6 {0,n}F]b) follows from a) with the observation 

that (V'i=i is satisfiable if and only if there is an i e {1, . . .,2l'''l} such 
that ipi is satisfiable. Note that given i e {1, . . . ,2l'?'l} the formula xpi can be 
computed from the original formula cp in poljmomial time by choosing (for all 
j e {!,... , \(p\}) from the jth subformula of the form ip&cr the formula ip if the 
yth bit of i is and if it is 1 . ■ 

We need the following simple property of monotone MVC formulas. 

Lemma 4.2. Let M be a set of AiVjC operators with ^ M. Then an arbitrary 
A4T>jC{M) formula <p is satisfiable iff the formula generated from (p by replacing 
every dependence atom and every atomic proposition with the same fresh atomic 
proposition t is satisfiable. 

Proof. If a frame W is a model for <p, so is the frame generated from W by 
setting all atomic propositions in all worlds to true. ■ 

We are now able to classify some cases that can be easily reduced to known 
results. 

Corollary 4.3. 

a) //{QO, A, V,-} c M c {□,<>, A, v,-,T,l,®} fen7WPr(M)-SAT is 
PSPACE-complete. 

b) //{□,<>, A, v,l} c M c {□,<>, A, v,T,l,=,®} then XD£(M)-Sat 
and XD£/c(M)-Sat are PSPACE-complete for all k ^ 0. 

c) {□,<>, A, 1} c M c {a<),A,J,l,=} then MV/:{M)-Sat and 
M'D£i^{M)-Sat are coNP -complete for all k^O. 

d) IfM c {□, 0, A, V, T, =, ®} then every M'D£{M) formula is satisfiable. 

e) IfM c { A, T, 1, =} then MVC{M)-Sat is in P. 

f) IfM c { A, V, T, 1, =, ®} then MV£.{M)-Saj is in P. 

Proof. The lower boimd of a) was shown by Ladner [Lad??], who proves 
PSPACE-completeness for the case of full ordinary modal logic. The upper 
boimd follows from this. Lemma [il] and the fact that 3 PSPACE = PSPACE. 



Interestingly, but not of relevance for our work, ® v a)^{<p Qitp) v {(p&a). 



4.1 Satisfiability 



35 



The lower bound for b) was shown by Hemaspaandra IHemOll Theorem 6.5] 
and the upper bound follows from a) together with Lemma|4.2| 

The lower bound for c) was shown by Donini et al. [DLN+92 1 who prove 
NP-hardness of the problem to decide whether an -concept is unsat- 
isfiable. ACE is a description logic which essentially is nothing else than 
A4'DC{C\, 0/ A, ^, T, _L) is not used in the hardness proof and T, although 
it is used in the original proof, can be substituted by a fresh atomic proposition 
t). For the upper bound Ladner's PSPACE-algorithm lLad77l can be used, as 
in the case without disjunction it is in fact a coNP-algorithm, together with 
Lermna |4.2| 

d) follows from Lemma |4!2| together with the fact that every MVC formula 
with t as the only atomic subformula is satisfied in the transitive singleton, 
i. e. the frame consisting of only one state which has itself as successor, in 
which t is true. 

e) follows from the polynomial time complexity of deciding satisfiability 
of a ICNF formula. Finally, f) reduces to Boolean formula evaluation by 



Lemma 4.2 Note that for e) and f) dependence atoms can be replaced by T 



because there we do not have any modality. ■ 
4.1.1 Poor MAN'S DEPENDENCE LOGIC 

We now turn to the "Complete cases. These include monotone poor man's 
logic, i. e. modal logic without negation and dependence disjunction, with 
and without dependence atoms. 

Theorem 4.4. // {□, 0, a, ©} c M c {□, 0, a, T, 1, ©} or {□,<>, a, 1, 
©} c M c {□, 0, A, T, 1, =, ®} then MVC{M)-Sat and MV£k{M)-SAT are 
1^-complete for all 0. 

Proof. Proving the upper bound for the second case reduces to proving 



the upper bo und for the first case by Lemma 4.2 For the first case it holds 
with Lemma 



4.1 



that XD£(n,0, A,-,T,l,®hSAT e 3-coNP = ^ since 



MVCia, 0, A, T, 1)-Sat e coNP (cf. the proof of Corollary[4^. The latter 



follows directly from Ladner's PSPACE-algorithm for modal logic satisfiability 
l|Lad77| which is in fact a coNP-algorithm in the case without disjunction. 

For the lower bound we consider the quantified constraint satisfaction 
problem QCSP2(Ri/3) shown to be -complete by Bauland et al. IBBC+lOi . 
This problem can be reduced to the complement of !)£(□, 0/ a, -■/l, ©)- 
Sat in polynomial time. 

An instance of QCSP2(Ri/3) consists of universally quantified Boolean vari- 
ables pi, ... , pk, existentially quantified Boolean variables Pk+i, ■ ■ ■ ,Pn and a 
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set of clauses each consisting of exactly three of those variables. QCSP2(Ri/3) 
is the set of all those instances for which for every truth assignment for 
pi,...,pk there is a truth assignment for pj^+l/ ■ ■ ■ / Pn such that in each clause 
exactly one variable evaluates to true. Note that for our reduction it is nec- 
essary that in each clause the variables are pairwise different whereas in 
QCSP2(Ri/3) ^^is does not need to be the case. However, the Hj -hardness 
proof can be adapted to account for this as follows. 

Claim 1. QCSP2(Ri/3) ^^^^ painvise different variables in each clause is D^-hard. 



Proof of Claim 1. We give a reduction from 3CNF-QBF2, which is long 
known to be Hj -complete (cf. [Wra77]). The only differences between an 
instance of QCSP2(Ri/3) instance of 3CNF-QBF2 are that in the latter 

a clause may contain negated variables, more than one literal that evaluates 
to true and the same variable more than once. 

Our reduction works as follows. The quantification of all original variables 
stays unchanged. All newly introduced variables are existentially quantified. 
Our new set of clauses consists of the clauses 

a) {f, /,/'}, {i,f',f"}, {i,f",f}, where tJJ'J" are new variables, 

b) for each original variable x: {x,x',f} and 

c) for each original clause {x,i/, 2}: {f,x,a},{a',y,b},{b',z,f}, 

{a,a',a"},{b,b\b"}, 
where a, a', a", b, b', b" are new variables (fresh for each original clause) 

and u := \ ^ , ^.{^ ^ 
[ p if M = ^p 

a) enforces the new variable / to evaluate to _L and b) simulates negated 
variables, c) uses Rx/3-clauses to allow for more than one of the three literals 
x, y and z to be true by splitting one old clause in three new clauses. But at 
the same time it still ensures that at least one of them is true by making the 
new variables interdependent in such a way that at most two of them can be 
true. ■* 

For the reduction from QCSP2(Ri/3) to the complement of AiVC{\3,(), 
A, ^/_L, ®)-Sat we extend a techniq ue from th e coNP-hardness proof for 
MVC{U, 0, A, 1)-Sat by Donini et al. llDLN+92 . Theorem 3.3]. Let pi,...,p^ 
be the imiversally quantified and p^+ir ■ ■ ■ ,Pn the existentially quantified 
variables of a QCSP2(Ri/3) instance and let Ci, . . . , Cm be its clauses (we 
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assume wi.o.g. that each variable occiirs in at least one clause). Then the 
corresponding A4I'£(Q 0/ a, ±, ©) formiila is 



k 

A ( 



n 





• • ^ im 




■ • ^ im 


a- 










a- 


V,i. 


• • ^ im 


V,i. 


■ • ^ im 




□« 




□« 







v) 



i=k+l 

1 

where p is an arbitrary atomic proposition and ■= | q ^ • 

For the corresponding M'DC{J^, (), a,^, ©) formula replace every ± with 
-p. 

To prove the correctness of our reduction we will need two claims. 

Claim 2. For r,s ^ a MVC{n,(), a,^,J,L) formula a ... a ()(pr a 
□i/'i a ... a Dtps unsatisfiable iff there is an i e {1, . . . , r} such that a \pi a 
... Ajpsis unsatisfiable. 

Proof of Claim 2. "<^=": li (pi a xpi a . . . a xpg is unsatisfiable, so is 0^; a 

\Z\ifi\ A ... A □i/'s and even more ()(pi a ... a O'/'r a □'/'i a ... a □'/'s- 

Suppose that ^/ a ipi a . . . a t/^s is satisfiable for all f e {1, . . . , r}. Then 
Of^"! A ... A ()(pr A dipi A ... A Di/^s is satisfiable in a frame that consists of a 
root state and for each ie {l,...,r}a separate branch, reachable from the root 
in one step, which satisfies (p^ a ipi a . . . a ipg. ■* 

Note that ()(pi a ... a ()(pr a □i/'i a ... a [Jips is always satisfiable if r = 0. 

Definition. Let v : {pi, . . . , p^} {0, 1} be a valuation of {pi, . . . , p^}. Then 
(pv denotes the M'DC{\Z\, (}, a, -■/l) formula 

A Vii...Vi^ v,-i...v™ D'-iorf-' p 

k}, 

v{pi)=l 

A A □'" D^-^Orf-' p 
fc}, 

v{pi)=0 

A Va...V,-« Va...V;« p 



!=fc+l 
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Claim 3. Let v: {pi, . . . , p/^} {0, 1} be a valuation. Then (py is unsatisfiable iff 
V can he continued to a valuation v' : {p\, . . .,p„} {0, 1} such that in each of the 
clauses {Ci, . . . , Cm} exactly one variable evaluates to true under v'. 

Proof of Claim 3. By iterated use of Claim|2| cp-,, is unsatisfiable iff there 
are ii, . . ., ixm with 

ij 6 {f e {1, . . . , n} I Vij, = 0}\{i e{l,...,k}\ v{p,) = 0} 
= 6 {1 n}\ Pi e Cj,}\{i e {1 k} \ v{pi) = O}, 



where /' := i ^- ^ ^ , such that (i) 

' [ ] — m else 



(pv{ii,...,i2n,)-= A a'-^^d"-' p 

k}, 

ie{ii,...,i2m}, 

d(P;)=1 

A A a'-^Od-' p 

fe{l k}, 

Kp/)=o 

A A P 

ie{k+l,...,n}, 

ie{ii,...,i2m} 
A -p/1 

is unsatisfiable and such that (ii) there are no a,b e {1, . . .,2m} with a < b, 
^!,,«' = ^itb' = (this is the case iff pi^ e €„! and p/^^ e Cf,/) and ia ib- 
Condition (ii) simply ensures that no subformula is selected after it has already 
been discarded in an earlier step. Note that (pv{ii, ■ ■ ■ , iim) is unsatisfiable iff 
(f) for all f e {l,...,k}: v{pi) = 1 and / e {ii,...,i2m} or = (and 

it {h,---,hm})- 
We are now able to prove the claim. 

"<^": For i = 1, ... ,1m choose ij e {1,. . . ,n} such that pi. e Cy/ and v'{pi. ) = 
1. By assumption, all ij exist and are uniquely determined. Hence, for all 
i e {1,. .. ,k} we have that = (and then i ^ {ii, . . . , i2m}) or v(^pi) = 1 
and there is a j such that ij = i (because each variable occurs in at least one 
clause). Therefore condition (i') is satisfied. Now suppose there are a < b that 
violate condition (ii). By definition of ijj it holds that pi^ e Cf,' and ^''(p,,,) = 1. 
Analogously, p,-^ e C^/ and v'{pij = 1. By the supposition pi^ e C^t and 
Pia ^ Pif since v'{pj^) = v\pi^) = 1, that is a contradiction to the fact that 
in clause C^/ only one variable evaluates to true. 
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If (pj, is unsatisfiable, there are .. ., z^,,, such that (i') and (ii) hold. 
Let the valuation v' : {pi, . . .,p„} {0, 1} be defined by 



v'iPi) ■■- 



1 if f 6 {ii,...,i2m} 

else 



Note that v' is a continuation of v because (V) holds. 

We will now prove that in each of the clauses Ci,. . . , Cm exactly one variable 
evaluates to true under v'. Therefore let / e {1, . . . ,m} he arbitrarily chosen. 

By choice of ij it holds that p,, e Cj. It follows by definition of v' that 

v'{pi.) = 1. Hence, there is at least one variable in Cj that evaluates to true. 

Now suppose that besides pi. another variable in Cj evaluates to true. Then 
by definition of v' it follows that there is a £ e {1, . . . , 2m}, I i= j, such that this 
other variable is p,^ . We now consider two cases. 

Case j < I: This is a contradiction to (ii) since, by definition of £, p,^ is in Cji 
as well as, by definition of i^, in C^/ and ij ^ if . 

Case £ < j: Since j e {1, . . . , m} it follows that £ ^ m. Since Q/ = C(^_|_,„y 
it holds that Pi^^^, e Q' and P!^,^,,^ e C(£_|_,„y. Furthermore i < £ + m and 
thus, by condition (ii), it must hold that if = if+,u- Therefore P/^^^, e Cj and 
^' ~ 1- Because j < £ + m this is a contradiction to condition (ii) as in 
the first case. ■* 

The correctness of the reduction now follows with the observation that (j) is 
equivalent to 

v. {pi,...,Vk}^{0,l} 

and that cp is unsatisfiable iff (pi, is unsatisfiable for all valuations v. {pi, . . . 
,P)c}-{0,l}. 

The QCSP2(Ri/3) instance is true iff every valuation v: {pi, . . . , p/J {0, 1} 
can be continued to a valuation v' : {pi, . . . , p„} {0, 1} such that in each of 
the clauses {Ci, . . . , Cm} exactly one variable evaluates to true under v' iff, by 
Claim|3| (p-o is unsatisfiable for all v. {pi, . . . , p^} {0, 1} iff, by the above 
observation, (p is unsatisfiable. ■ 

Next we turn to (non-monotone) poor man's logic. 

Theorem 4.5. If {□, 0, a, =} c M then MVC{M)-Sat is NEXP -complete. 

Proof. Sevenster showed that the problem is in NEXP in the case of ® ^ M 



IISev09[ Lemma 14]. Together with Lemma [ll] and the fact that 3 NEXP 
NEXP the upper bound applies. 



40 



Chapter 4 Modal Dependence Logic 



For the lower bound we reduce 3CNF-DQBF, which was shown to be 
NEXP-hard by Peterson et al. [PRAOl , Lemma 5.2.2f\ to our problem. 

An instance of 3CNF-DQBF consists of universally quantified Boolean 
variables pi, . . . ,pi^, existentially quantified Boolean variables Pk+i, ■ ■ ■ , Pn, 
dependence constraints P^+i, ■ ■ ■ fPn ^ {pi/ ■ ■ ■ ,Pk} ^rid ^ set of clauses each 
consisting of three (not necessarily distinct) literals. Here, P, intuitively states 
that the value of p, only depends on the values of the variables in P, . Now, 
3CNF-DQBF is the set of all those instances for which there is a collection of 
functions /jt+i, ■■.,/« with /, : {0, 1}^' {0, 1} such that for every valuation 
v: {pi,...,p;J {0, 1 } there is at least one literal in each clause that evaluates 
to true under the valuation v' : {pi, . . . ,p„} {0, 1} defined by 

N ._ f ^(P/) if f 6 {!,...,/:} 

Mv\Pi) if fe{/c +!,...,«} • 

The functions fk+i, ■ ■ ■ ,fn act as restricted existential quantifiers, i. e. for an 
i e {k + 1, . . . ,n} the variable p, can be assumed to be existentially quantified 
dependent on all universally quantified variables in P, (and, more importantly, 
independent of all universally quantified variables not in P,). Dependencies 
are thus explicitly specified through the dependence constraints and can 
contain - but are not limited to - the traditional sequential dependencies, 
e. g. the quantifier sequence Vpi3p2Vp33p4 can be modeled by the dependence 
constraints P2 = {pi} and P4 = {pi, ps}. 

For the reduction from 3C NF-DQ BF to MVC{a 0, a, =)-Sat we use 
an idea from Hemaspaandra [HemOl' Theorem 4.2]. There, PSPACE-hardness 
of AiT>jC{C\, 0/ A, -')-Sat over the class J-<^2 of all Kripke structures in which 
every world has at most two successors is shown. The crucial point in the 
proof is to ensure that every Kripke structure satisfying the constructed 
A4'D£{C\, 0/ A, — ') formula adheres to the structure of a complete binary tree 
and does not contain anything more than this tree. In the class J-<i2 this is 
automatically the case since in a complete binary tree all worlds already have 
two successors. 

Although in our case there is no such an a priori restriction and therefore 
we cannot make sure that every satisfying structure is not more than a binary 
tree, we are able to use dependence atoms to ensure that everything in the 
structure that does not belong to the tree is essentially nothing else than a 
copy of a subtree. This will be enough to show the desired reducibility. 

^Peterson et al. showed N EXP-hardness for DQBF without the restriction that the formulas must 
be in CNF. However, the restriction does not lower the complexity since every prepositional 
formula is satisfiability-equivalent to a formula in CNF whose size is bounded by a polynomial 
in the size of the original formula. 
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Let pi, . . . , be the universally quantified and Pk+i, ■ ■ ■ ,pn the existentially 
quantified variables of a 3CNF-DQBF instance (p and let Pk+i, ■ ■ ■ ,Pnbe its 
dependence constraints and {In, Z12, Z13}, ■ ■ ■ , {/ml/ 'm2/ 'ms} its clauses. Then 
the corresponding Ai'D£{C\, (), a, ^, =()) formula is 

g{<P).= A A on"-'pi) (0 

m 

A AO"(/,i a/,2a/,3a/,) (n) 

/=1 

m 

A rfO"-'^(7T A ... A ^ A ALfc+1 p.)) (^•^) 

if kj = p, 



where pi, . . . , Pn,fi, ■ ■ ■ ,fm are atomic propositions and / • • '■= I -r/' 

' (. P It /y 

Now if (p is valid, consider the frame which consists of a complete binary tree 
with n levels (not counting the root) and where each of the 2" possible labelings 
of the atomic propositions pi, ■ ■ ■ ,pn occurs in exactly one leaf. Additionally, 
for each i e {1, . . . , m} /, is labeled in exactly those leaves in which In v Z,2 v 
/j3 is false. This frame obviously satisfies (/), (ii) and {Hi). And since the 
modalities in {iv) model the quantors of <p, fi is true exactly in the leaves 
in which In v //2 v /,3 is true and the = atoms in (iv) model the dependence 
constraints of (j), (iv) is also true and therefore g{<p) is satisfied in the root of 
the tree. 



As an example see Figure 4.1 for a frame satisfying g{(p) if the first clause in 
(pis {n,p„}. 

If, on the other hand, g{^) is satisfiable, let W be a frame and f a world in 
W such that W, {t} \= g{(p). Now (f) enforces W to contain a complete binary 
tree T with root t such that each labeling of pi, . . . ,pn occurs in a leaf of T. 

We can further assume w.l.o.g. that W itself is a tree since in A4T)jC different 
worlds with identical proposition labelings are indistinguishable and therefore 
every frame can simply be unwinded to become a tree. Since the modal depth 
of g{cp) is n we can assume that the depth of W is at most n. And since (f) 
enforces that every path in W from t to a leaf has a length of at least n, all 
leaves of W lie at levels greater than or equal to n. Altogether we can assume 
that W is a tree, that all its leaves lie at level n and that it has the same root as 
T. The only difference is that the degree of W may be greater than that of T. 

But we can nonetheless assume that up to level k the degree of W is 2 (*). 
This is the case because if any world up to level k — 1 had more successors 
than the two lying in T, the additional successors could be omitted and (f). 
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Figure 4.1: Frame satisfying g{(p) 



(ii), (in) and (iv) would still be fulfilled. For (i), (ii) and (in) this is clear and 
for (iv) it holds because (iv) begins with D*^. 

We will now show that, although T may be a proper subframe of W, T 
is already sufficient to fulfill g(<^). From this the validity of ^ wiU follow 
immediately. 

Claim 1. T,{t}hgi<P)- 

Proof of Claim 1. We consider sets of leaves of W that satisfy /i a ... a 

fm A Ar=ic+l Pi) ^^'^ that can be reached from the set {t} by the modality 
sequence □'^O""'^- Let S be such a set and let S be chosen so that there is no 
other such set that contains less worlds outside of T than S does. Assimie 
there is a s e S that does not lie in T. 

Let i e {1, . . . , m} and let s' be the leaf in T that agrees with s on the labeling 
of pi, . . . , p„. Then, with W,{s} \= fi and (Hi), it follows that W, {s'} \= fi. 

Let S' := (S\{s}) u {$'}. Then it follows by the previous paragraph that 
W, S' 1= /i A ... A /m. Since W, S |= AILfc+i =(^!' s' agrees with s on 

the propositions pi,...,p„ it follows that W, S' |= A/Lfc+i =(^(' PO- Hence, 
S' satisfies fi a .. . a fm a A/Lffc+i Pi) ^i^d it only differs from S by 
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replacing s with s' it can be reached from {t} by D^^O""*^ because s and s' agree 
on pi,...,pi and, by (*), W does not differ from T up to level k. But this 
is a contradiction to the assimiption since S' contains one world less than S 
outside of T. Thus, there is no s e S that does not lie in T and therefore {iv) is 
fulfilled in T. Since (z), (ii) and {in) are obviously also ftilfilled in T, it follows 
thatT,{f} h^W- 

(n) ensures that for all i e {1, . . . ,m} there is a leaf in W in which v 
'i2 V /,3) A /, is true. This leaf can lie outside of T. However, (Hi) ensures that 
all leaves that agree on the labeling of In, 1(2 and /,3 also agree on the labeling 
of And since there is a leaf where — '(/ji v //2 v Ij^) a /, is true, it follows 
that in all leaves, in which -^{In v Z;2 v Zjs) is true, /, is true. Conversely, if/; 
is true in an arbitrary leaf of W then so is In v /,2 v /,-3 (**). 

The modality sequence models the quantors of ^ and /\"^^.^-^ ={Pir 

Pi) models its dependence constraints. And so there is a bijective correspon- 
dence between sets of worlds reachable in T by □'^O""*^ from {t} and that 
satisfy = {Pi, Pi) on the one hand and truth assignments to pi, . . . , p„ 

generated by the quantors of (p and satisfying its dependence constraints 
on the other hand. Additionally, by (**) follows that fx a ... a fm implies 
/\T=i {hi V la V la) and since T, {t)\= g{(p), (p is valid. ■ 

4.1.2 Cases with only one modality 

We will now examine formulas with only one modality. 

Theorem 4.6. Let M c {Q 0, a, v, ^, T, 1, ©} with □ ^ M or ^ M. Then the 
following hold: 

a) A4X'£(Mu {=})-Sat i;:^ MV£{Mu {T,1})-S at , i.e. adding the ={■) 
operator does not increase the complexity if we only have one modality. 

b) For every AAT>C{M u {=}) formula cp it holds that ® is equivalent to v, 
i. e. <p is equivalent to every formula that is generated from (p by replacing some 
or all occurrences ofQbyw and vice versa. 

Proof. Every negation -- = (■) of a dependence atom is by definition always 
equivalent to 1 and can thus be replaced by the latter. For positive =(•) atoms 
and the © operator we consider two cases. 

Case ^ M. If an arbitrary A4T>jC{'[J, a, v, ^, T, 1, =, ®) formula cp is sat- 
isfiable then it is so in an intransitive singleton frame, i. e. a frame that only 
contains one world which does not have a successor, because there every 
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subformula that begins with a □ is automatically satisfied. In a singleton 
frame all =(•) atoms obviously hold and ® is equivalent to v. Therefore the 
(un-)satisfiability of <^ is preserved when substituting every =(•) atom in <p 
with T and every ® with v (or vice versa). 

Case □ ^ M. If an arbitrary Ai'DC{(), a, v, ^, T, 1, =, ®) formula (p is satisfi- 
able then, by the downward closure property there is a frame W with a world 
s such that W, {s} \= cp. Since there is no □ in ^, every subformula of (p is also 
evaluated in a singleton set (because a can never increase the cardinality of 
the evaluation set). And as in the former case we can replace every =(•) atom 
with T and every ® with v (or vice versa). ■ 

Thus we obtain the following consequences - note that this takes care of all 
remaining fragments for the unbounded arity case. 

Corollary 4.7. flj //{a,^} c M c {□,<>, a, v,-,T,1,=,®}, M n {v,®} 
^ 0and \Mn{aO}\ = 1 then MVC{M)-Sai and MV£^{M)-Sat are 
N P-complete for all k ^ 0. 

b) ^/{a,-} c M c {□,<>, a,-, T,1,=} and |Mn{n,0}| = 1 then 
MVC{M)-Ski 6 P. 

c) //{a} c M c {□,<>, a, v,T,1,=,®} and |Mn{n,0}| = 1 then 
MVC{M)-Sat 6 P. 

d) IfA(^M then MVL{M)-Sai e P. 

Proof. Part a) without the =(•) and ® operators is exactly [HemOll Theo- 



rem 6.2(2)]. Theorem 4.6 extends the result to the case with the new operators. 
Part b) is IIHemOU Theorem 6.4(c,d)] together with Theorem |4.6^ for the =(•) 
operator. Part c) is IIHemOll Theorem 6.4(e,f)] together with Theorem |4.6^ ,b. 

Part d) without =(•) and ® is HHemOll Theorem 6.4(b)]. The proof for the 
case with the new operators is only slightly different: Let (p be an arbitrary 



A^r'£(M) formula. By the same argument as in the proof of Theorem 4.6? 
we can replace all top-level (i. e. not lying inside a modality) occurrences of 
® in with V to get the equivalent formula cp'. <p' is of the form [Jipi v . . . v 
n\^k V 'Oc^i V ... V ()(Tm V fli V . . . V flg where every ipj and CTj is a Ai'DC{M) 
formula and every a, is an atomic formula. If A: > or any is a literal, T or a 
dependence atom then cp' is satisfiable. Otherwise it is satisfiable iff one of the 
(Jj is satisfiable and this can be checked recursively in polynomial time. ■ 



4.1.3 Bounded arity dependence 



Finally, we investigate the remaining fragments for the boimded arity case. 
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Theorem 4.8. Let k ^ 0. Then the following hold: 

a) IfM c {□, 0, A, V, T, 1, =} then MVC^{M)-Saj e PSPACE. 

b) IfM c {□, 0, A, T, 1, =} then MVC,,{M)-Sat e Z^. 

Proof, a) Let (p e MVCi,{M). Then by IISev09i Theorem 6] there is an 
ordinary modal logic formula <p^ which is equivalent to (p on singleton sets of 
evaluation, i. e. for all Kripke structures W and states w; in W 

]N,{w}'^(p iff ]N,w'^(p^. 

Here (p^ is constructed from (p in the following way: Let ={pi^^, . . . ,pi^^ , 

Pim+i =(P'-u' ■ ■ ■ ' Ph,n ' P',../c„+i ) (fo'" h,...,k„^k) be all dependence 
atoms occurring inside (p (in an arbitrary order and including multiple occur- 
rences of the same atom in cp multiple times) and for all j ^ let 

Bj := {a.f{p\, . . . ,pj) I/: {T, 1}^ {T, 1} is a total Boolean function}, 

where c^/ipi, ■ ■ ■, Pj) is a propositional encoding of/, e. g. 

OCf{pi,...,Pj)-= V A . . . A pJ', 

(zi,...,,y)G/-l(T) 

with p' := I ^pff\Z~[ ■ Note that for all /: {T, 1}^' ^ {T, 1} and all valua- 
tions V : {pi, ...,pj}^ {T, 1} it holds that V \= Kf iff /(y(pi), . . . , V{pj)) = 
T. 

Then t/)^ is defined as 

V ■■■ V ^'K'- 

where (p'{oc-[, . . . , a„) is generated from cp by replacing each dependence atom 
= {Pit,i' Pickc' P'a^+i) ^it^ t^*^ propositional formula a^(p/^j, . . . , p/^.^^ ^ 
p,-^^^^j. Note that for all£ e {1,. ..,n} we have that [a^l e 0(2''<) and |B;tJ = 
2^''' . Therefore 

n 2^'' ■ |</'|-O(2'^0eO((22y .|^|). 



46 



Chapter 4 Modal Dependence Logic 



This means that is an exponentially (in the size of (p) large disjunction of 
terms of linear size (remember that k is fixed). is satisfiable if and only 
if at least one of its terms is satisfiable. Hence we can nondeterministically 
guess in polynomial time which one of the exponentially many terms should 
be satisfied and then check in deterministic polynomial space whether this 
one is satisfiable. The latter is possible because ip'{oii, . . . , oc„) is an ordinary 
modal logic formula and the satisfiability problem for this logic is in PS PACE 
IILad77l . Altogether this leads to MVCi,{M)-Sat e 3 PSPACE = PSPACE. 

b) In this case we cannot use the same argument as before without mod- 
ifications since that would only lead to a PSPACE upper bound again. The 
problem is that in the contruction of (^^ we introduce the subformulas a.f and 
these may contain the v operator. We can, however, salvage the construction 
by looking inside Ladner's PSPACE algorithm | La d77, Theorem 5.1]. For 
convenience we restate (a slightly modified form of) it in Algorithm |4.1[ It 
holds for all ordinary modal logic formulas cp that cp is satisfiable (by a Kripke 
structure from the class K) if and only if satisfiable({(f}, 0, 0)=true. 

Algorithm 4.1: satisfiable(T,A,£) 

if T $ Atomic then //Atomic denotes the set of atomic propositions, their negations 
//and the constants T and _L 
choose ip e T\Atomic //deterministically (but arbitrarily) 
set r := T\{ip} 
if tp = tpi A tp2 then 

return satisfiable(T' u {ipi, tp2}, A, E) 
elseif = ipi V 1/^2 then 

nondeterministically existentially guess / e {1,2} 

return satisfiable(T' u {ipi}, A, E) 
elseif Ip = □i/'i then 

return satisfiable(T', Au {tpi}, E) 
elseif ip = ()xp-[ then 

return satisfiable(T', A, E u {\pi}) 
end 
else 

if r is consistent then 
i{E^0 

nondeterministically universally guess tp e E 

return satisfiable(A u {tp}, 0, 0) 
else 

return true 
end 
else 
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return false 
end 
end 

The algorithm works in a top-down manner and rims in alternating poly- 
nomial time. It universally guesses when encountering a □ operator and 
existentially guesses when encountering a v operator - in all other cases 
it is deterministic. Now, to check whether (|)^ is satisfiable we first exis- 
tentially guess which of the exponentially many terms should be satisfied 
and then check whether this term (p'{a-i, . . . , ol„) is satisfiable by invoking 
satisfiable({<f'(ai, . . .,««)}, 0, 0). 

To see that this in fact gives us a -algorithm note that (p does not contain 
any disjunctions. Hence also (p'{oci, . . . , a„) contains no disjunctions apart 
from the ones that occur inside one of the subformulas ai, . . . , a„. Therefore 
Algorithm |4 . 1 1 does not do any nondeterministic existential branching apart 
from when processing an a,. But in the latter case it is impossible to later 
nondeterministically universally branch because imiveral guessing only oc- 
curs when processing a □ operator and these cannot occur inside an a,, since 
these are purely propositional formulas. Therefore the algorithm, if run on a 
formula cp'{oci, . . . , a;„) as input, is essentially a n2 algorithm. Together with 
the existential guessing of the term in the beginning we get that M-T) C]^{M)- 
SAT6 = S^. ■ 



Theorem 4.9. !/{□, 0, a, =} c M then MVC^{M)-Sat is IL^-hard. 



Proof. We use the same construction as in the hardness proof for Theorem 4.5 
to reduce the problem 3CNF-QBF3, which was shown to be S3 -complete by 
Wrathall |'Wra77, Corollary 6], to our problem. 3CNF-QBF3 is the set of all 
propositional sentences of the form 



3pi . . . 3pk\/pk+i ■ ■ ■ "^pe^pe+i ■■■Jpn /\iUi V hi V ks), 

i=\ 

where the are literals over p\, . . . , pn, which are valid. 

Now let be a 3CNF-QBF3 instance, let pi,...,pn be its variables and let 

k, £, m, (lij)i^i^ „, be as above. Then the corresponding M'DCj,{n, 0/ a, =) 
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formula is 

;=1 

m 

A A0"(/,1 a/,-2a/,3a/0 (ii) 

! = 1 
IJ! 

A Aa^Hik'i'Af') ("0 

A 0^rf-'^0"-^(=(pi) A ... A =(pO a 7T a ... a 7™) (fz;) 

( V if / • • — f) 

where pi,..., Pn,fi, ■ ■ ■ / /m are atomic propositions and / • • := < _ _' 

J p It lij — p. 

The proof that g is a correct reduction is essentially the same as for The 

orem 



4.5 (also see Figure 143] for an example of a typical Kripke structure 
satisfying g{(p)). The only difference is that there we had arbitrary depen- 
dence atoms in part (iv) of g{(p) whereas here we only have 0-ary dependence 
atoms. This difference is due to the fact that there we had to be able to ex- 
press arbitrary dependencies because we were reducing from 3CNF-DQBF 
whereas here we only have two kinds of dependencies for the existentially 
quantified variables: either complete constancy (for the variables that get 
quantified before any imiversal variable does) or complete freedom (for the 
variables that get quantified after all universal variables are already quanti- 
fied). The former can be expressed by 0-ary dependence atoms and for the 
latter we simply omit any dependence atoms. 

Note that it might seem as if with the same construction even -hardness 
for arbitrary k could be proved by having more alternations between the two 
modalities in part {iv) of g{cl)) . The reason that this does not work is that we 
do not really ensure that a structure fulfilling g{(j)) is not more than a binary 
tree, e. g. it can happen that the root node of the tree has three successors: one 
in whose subtree all leaves on level n are labeled with pi, one in whose subtree 
no leaves are labeled with pi and one in whose subtree only some leaves are 
labeled with pi . Now, the first diamond modality can branch into this third 
subtree and then the value of pi is not yet determined. Hence the modalities 
alone are not enough to express alternating dependencies and hence we need 
the = {pi) atoms in part (iv) to ensure constancy. ■ 

Corollary 4.10. a) Let k ^ and {□,<>, a, v,-} c M. Then MVC^iM)- 
Sat is PSPACE-complete. 

b) Let k > 3 and {□,<>, a, -,=} c M c {□,<>, a,-, T,l,=,®}. Then 
MVLi{M)-Sat is lX,-complete. 
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Proof. The lower bound for a) is due to the PSPACE-completeness of or- 
dinary modal logic satisfiability which was shown in llLad77l . The upper 
bound follows from Theorem |4.8^ , Lemma [41^ and the fact that 3 PSPACE = 
PSPACE. 

The lower bound f or b) is Theorem 



Theorem 



4.8 3, Lemma 



4.1 



and B-Zj 



4.9 
p— 



The upper bound follows from 



Note that in Corollary 4.10 3 we require that A: > 3. This is due to the fact 
that the reduction in our proof of Theorem 4.9 needs ternary dependence 
atoms. With k ^ 2 this reduction does not work and thus the lower bound 
remains open in that case. 



4.2 Model checking 

Now that we have classified the operator fragments of M.T>C with respect 
to the complexity of satisfiability we turn over to model checking and do 



the same. We will investigate - according to Definition 2.20 - for all M cz 
{□/ 0/ A, V, ®, ^, =} and all A: > the problem 

Problem: MVC{M)-MC {MV£,,{M)-MC) 

Input: An MVC{M) (resp. MVC]^{M)) formula (p, a Kripke struc- 
ture K = (S, R, n) and a team T ^ S. 
Question: K,T \= cp? 

The first lemma shows that whether to include T, _L or ^ in a sublogic 
MVC{M) of MVC does not affect the complexity of A^D£(M)-MC . 

Lemma 4.11. Let M be an arbitrary set of AiVL operators, i. e. M c 0/ a, v, 

®, =, _L, T}. Then it holds that 

MVC{M)-MC =1, MVC{M\{J,L,^})-MC. 



Proof. It suffices to show So let K = {S,R, n) be a Kripke structure, 
T ^ S,(pe MVC{M) and Var(^) = {pi, . . . , Let p[, p'„, t,f be fresh 
propositional variables. Then K,T \= (p iff K', T \= (p', where K' := (S, R, n') 
with n' defined by 

7r'(s)n{f,/} := {t}, 



Ti'{s) n{pi,p\} := 
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for all i e {1, . . . , n} and s e S, and (p e MT>C{M\{T, 1, -■}) defined by 

cp' := Hp'lhPlWlhPl) . . . ip'nhpn){tm{f/l). , 

Now we will show that the most general of our problems is in NP and 
therefore all model checking problems investigated later are as well. 

Proposition 4.12. Let M be an arbitrary set of MVC operators. Then M'DC{M)- 
MC is in NP. And hence also A42?£j.(M)-MC is in UP for every > 0. 

Proof. The following non-deterministic top-down algorithm clearly checks 
the truth of the formula <p on the Kripke structure W in the evaluation set T in 
polynomial time. 

Algorithm 4.2: check(W = {S,R,n),<p,T) 

case (p 

when (p = T 
return true 

when (p = 1. 
return false 

when <p = p 
f oreach ss T 

if not p e n{s) then 
return false 
return true 

when (p = 
f oreach s e T 
if p G 7r(s) then 
return false 
return true 

when cp= ={pi,...,p„) 
f oreach {s,s') eT 
if 7r(s) n {pi, . . . , p„_i} = n{s') n {p-y, then 

//i. e. s and s' agree on the valuations of the propositions pi,. . . , p„_i 
if {q e 7t(s) and not q e 7t(s')) or (not q e 7t(s) and q e n{s')) then 
return false 
return true 
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when ip = ip 'V 6 
guess two sets of states A, B with Au B = T 
return (check(W, A, tp) and check(W, B, 6)) 

when (p = ip®6 
return (check(W, T,ip) or check(W, T, 6)) 

when (p = \p A 6 
return (check(W, T, ip) and check(W, T, 6)) 

when (p = ^xp 
T :=0 
foreach s' e S 
f oreach s e T 
if (s,s') e Rthen 

r ■= r u {s'} 

// T' is the set of all successors of all states in T, i.e. T' = R(T) 
return check(W, T' , xp) 

when (p = ()tp 
guess set of states T' c S 
foreach s e T 
if there is no s' e T' with (s,s') e R then 
return false 

// T' contains at least one successor of every state in T, i.e. T' e (T) 
return check(W, T' , tp) 

The algorithm runs in polynomial time since it processes each subformula 
of (p in polynomial time and exactly once. ■ 

4.2.1 Unbounded arity fragments 

We now focus on the cases with unbounded arity dependence atoms - though 
sometimes our results directly carry over to the bounded cases. 

We first show that the model checking problem is N P-hard in general and 
that this still holds without modalities. 

Theorem 4.13. Let {a., v,=} c M. Then >[X'£(M)-MC is HP-complete. Fur- 
thermore, A4T>jC^{M)-MC is UP -complete for every k ^ 0. 



Proof. Membership in NP follows from Proposition 4.12 For the hardness 
proof we reduce from 3Sat to M'DCo{a, v, =)-MC. 
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For this purpose let ^ = Ci a ... a Cm be an arbitrary 3CNF formula with 
variables x^,. . . ,x„. Let W be the Kripke structure (S, R, n) over the atomic 
propositions ri,. . . , r„, pi, . . . , p„ defined by 

S := {Si, . . . ,Sm}/ 

R ■■= 0, 

Tj, pj} iff Xj occiirs in C; positively, 
Tj} iff Xj occurs in C, negatively. 



iff Xj does not occur in C;. 



7r(s,-)n{r;,py} := 
Let jp be the M'DCo{a, v, =) formula 

V ^ 

and let T := {si, . . . , Sm} be the evaluation set. 

We will show that (p e 3Sat iff W, T \= ip. Then it follows that 3Sat 
A^X'£o(M)-MC and therefore MVCoiM)-MC is NP-hard. 

Now assume that cp e 3Sat and that is a satisfying valuation for (p. From 
the valuations 9{xj) of all Xj we construct subteams T\,...,T„ such that for 
all 6 {1, . . . , n} it holds that W, Tj \= rj a =(py). The Tj are constructed as 
foUows: 



p 



{si e S I 7r(s,) n {ry, pj} = {rj, pj}} iff = 1, 
{s; 6 S I 7r(s;) n {ry,py} = {rj}] iff ^(xy) = 0, 



i. e. Tj is the team consisting of exactly the states corresponding to clauses 
satisfied by 0{xj). 

Since every clause in <p is satisfied by some valuation Q{xj) = 1 or 6{xj) = 
we have that Ti u . . . u T„ = T such that W, T |= (|). 

On the other hand, assume that W,T \= ^, therefore we have T = Ti u u 
. . . u T„ such that for all j s {l,...,n] it holds that Tj \= rj a ={pj)- Therefore 
n{si) n {pj} is constant for all elements s,- e Tj. From this we can construct a 
satisfying valuation 6 for (p. 

For all let Ij := {i \ s; e Tj}. For every j e {1, . . . ,n} we consider Tj. If for 
every element s; e Tj it holds that 7t(s,) n {pj} = {pj} then we have for all 
/ e Ij that Xj is a literal in C,. In order to satisfy those C; we set 6{xj) = 1. If for 
every element s; e Tj it holds that 7r(s,) n {py} = then we have for every 
/ G that ^Xj is a literal in C,. In order to satisfy those C, we set 0{xj) = 0. 
Since for every s; e T there is a / with s/ e T,- we have an evaluation 6 that 
satisfies every clause in cp. Therefore we have 9 \= (p. m 
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Instead of not having modalities at all, we can also allow nothing but the 
modality, i. e. we disallow propositional connectives and the □ modality, and 
model checking is N P-complete as well. 

Theorem 4.14. Let {<>,=} c M. Then MT>£{M)-MC is HP-complete. 



Proof. Membership in NP follows from Proposition 4.12 again. 

For hardness we again reduce from 3SAT. Let (p = A;^i arbitrary 
3CNF formula built from the variables Xi, . . . ,x„. Let W be the Kripke struc- 
ture (S, R, n), over the atomic propositions p\, . . . , pn, cj, shown in Figure 4.2 
and formally defined by 



{C\, . . ■ / Cffi, S-^, . . . ,5^,5^, . . . / 



Rn{(c„s|),(c„sO)} 

7t(c,-) 

7r(s;) 
7r(sO) 



{Pj}- 



iff Xj occurs in C, positively, 
iff Xj occurs in C, negatively, 
iff Xj does not occur in C;, 




Figure 4.2: Kripke structure part corresponding to the 3CNF clause C, = Xj. 



Letxphe the M'DC{(), =) formula <)=(pi, ■ ■■ ,pn,ci) and let T := {ci, . . . ,c,„}. 
Then we will show that (p e 3SAT iff W,T \=xp. Hence, 3SAT sg^ MVC{M)- 
MC and MVC{M)-MC is NP-hard. 

First suppose we have a satisfying valuation Q for (p. From 6 we will con- 
struct a successor team T' of T, i. e. for all s e T there is an s' e T' s.t. (s, s') e _R 
with W, T \= =(pi, . . . , Pn, cj)- T' is defined by: 



T' ■.= {s^\eiXj) = z,je{l,...,n}} 
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e{xj) 



Since satisfies every clause C, of cp we have that for every C, there is an xj 
with 

1 1, iff Xj e Cj 
' 0, iff ^Xj e Ci- 

It follows that for every s e T there is an s' e T' such that (s, s') e R. 

By construction of T' it is not possible to have both and s| in T'. Hence 

for all elements Sy, s|, e T' it follows that f and therefore 7i{s^) n 
{pi,---,Pn} ^ 7z{sj) n {pi,...,p„}. Thus W,T' \= ={pi, . . . , p„,q). 

On the other hand assume W, T \= ip. Then there is a successor set T' of T 
s.t. for every s e T there is an s' e T' with (s, s') e _R and T' \= = {pi, ■ ■ ■ , pn, 
We construct 6 as follows: 



{xj) :-- 



1, iff e r 
0, iff 8° e r 
0, iffsO,s|^T'. 



Note that in the latter case it does not matter if or 1 is chosen. 

Since W, T' \= ={pi, ■ ■ ■ , Pn, (\) and for every it holds that W, {s^, s|} ^ 

= (pi, . . . , Pn, Cj) we have that for every j at most one of or sj is in T' . It 
follows that 9 is well-defined. 

Since for every c,- e T there is an s? e T' s.t. (c/, s|) e _R with 9{xj) = z, 
we have by contruction of W that 6 satisfies every clause C, of cj). From this 
follows (p e 3Sat. ■ 

If we disallow but allow □ instead we have to also allow v to get N P- 
hardness. 

Theorem 4.15. Let {□, v,=} c M. Then MVC{M)-MC is HP-complete. Also, 
MVC^{M)-MC is UP -complete for every k > 0. 



Proof. Membership in NP follows from Proposition 4.12 again. To prove 
hardness, we reduce 3SAT to M-T) C^i^, v, =)-MC. Before we formally define 
the reduction and prove its correctness let us demonstrate its general idea 
with a concrete example. 

Example 4.16. Let cp be the 3CNF formula 

(— 'Xl V X2 V X3) A (X2 V — 'X3 V X4) A (Xi V — 'X2) . 
\ , \ , \ / 

V V V 

Ci C2 C3 
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Now we have to construct a corresponding Kripke structure W = (S, R, n), a 
team T c S and a MVC{U, v, =) formula ^ such that (p e 3Sat iff W, T |= !/;. 

The structure W is shown in Figure |4.3| It has levels to 4 where the /th 
level (for / > 1 corresponding to the variable Xj in the formula (p) is the set 
of nodes reachable via exactly j transitions from the set of nodes s^, S2 and S3 
(corresponding to the clauses of (p). 




Figure 4.3: Kripke structure corresponding to ^ = (-■xi v X2 v X3) a (x2 v 

^X3 V X4) A [Xl V -'X2) 

The formula ^ is 




71 72 73 



And the team T is {si, S2, S3}. 

Now suppose that ]N,T \= \p. Then, for all 7 e {1, ... ,4} let T,- c T with 
Tj \= jj and Tj u . . . u T4 = T. By comparing the formulas jj with the chains 
in the Kripke structure one can easily verify that Ti g {si,S3}, i. e. there can at 
most be one of s^ and S3 in Ti since n(rj) n p-[ ¥= Tc{r^) n [pi] and S2 cannot be 
in Ti since its direct successors f^, do not agree on pi. In this case T\ = {s\} 
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means that Ci is satisfied by setting 9{xi) = and the fact that {32} ^ 71 
corresponds to the fact that there is no way to satisfy C2 via xj, because xi 
does not occur in C2. Analogously, T2 c {si, 82} or T2 c {53}, and T3 g {si, S2} 
and T4 c {S2}. 

Now, for example, the valuation 9 where Xj, X3 and X4 evaluate to true and 
X2 to false satisfies (p. From this valuation one can construct sets Ti, . . . , T4 
with Ti u . . . u T4 = {si, S2, S3 } such that Tj \= 7y for all 7 = 1, . . . , 4 by defining 
Tj := {s, I Xj satisfies clause C, under 9} for all;. This leads to Ti = T2 = {S3}, 
T3 = {si}andT4= {S2}. 

The gray colourings indicate which chains (resp. clauses) are satisfied on 
which levels (resp. by which variables), ip (resp. (p) is satisfied because there is 
a gray coloured state in each chain. ^ 



Now, in general, let (p = /\"Li Q be an arbitrary 3CNF formula over the 
variables xj, . . . , x„. Let W be the Kripke structure (S, R, n) over the atomic 
propositions p\, . . ■ ,pn shown in Figures 4.4 to 4.9 and formally defined as 
follows: 



4.5 



S := {s,|f 6 {!,..., m}} 

u {r[\k e {l,...,m},j e {l,...,n}} 
u {f{\ke {l,...,m},i e {!,...,«}} 

{ (S;/ ^} ) } iff xi occurs in C, (positively or negatively) (Fig. 

{ (S;/ ^})' (Si/ ) } iff Xi does not occur in Q (Fig. 

ke{l,...,n} 

{(r^,r|^^)} iff xy and xy_|_i both occur in C/ (Fig. \4.6^ 

r|^^), {r^-,fi^^)} iff x^ occurs in Q but xy+i does not (Ffg-. |4.7| 
occur in C, 

{ ('i' J"/^^ )' (H' ''/^^ ) } iff -"^i does not occur in Q but x^+i (Ffg. |4.8| 
does occur in C, 

{(r|,r|^^), (r^,rj+^)} iff neither xy nor x^+j occur in Q (Ffg. |4.9| 
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n{si) := 

^^^j-^ \{Pj} iff occurs in Q positively or not at all 

' 1 iff Xj occurs in C, negatively 

n{f{) := 

Let ip be the >1X'£(0 v, =) formula 

V D'=(P;) 

and let T := {si, . . . , Sm}- 

Then, as we will show, </) 6 3Sat iff W,T \= ip and therefore MVCq(^, 
V, =)-MC is NP-complete. Intuitively, the direction from left to right holds 
because the disjimction splits the team {si, ...,Sm} of all starting points of 
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Figure 4.8: Xj does not occur in C,- but Figure 4.9: Xj and Xj+i do not occur 
Xj+i does occur in Q. in Q. 



chains of length n into n subsets (one for each variable) in the following way: 
s; is in the subset that belongs to Xj iff Xj satisfies the clause C, under the 
variable valuation that satisfies (p. Then the team that belongs to Xj collectively 

satisfies the disjunct lJ={pj) of xp. For the reverse direction the r| states are 

needed to ensure that a state s, can only satisfy a disjunct ^ = {pj) if there is a 
variable Xj that occurs in clause C, (positively or negatively) and satisfies C, . 

More precisely, assume that is a satisfying valuation for (p. From 9 we 
construct subteams Ti, . . . , T„ with Ti u . . . u T„ = T s.t. for aU it holds that 
Tj \= lJ={pj). Tj is defined by 

^ .^Usi\{si}hdpj} ifie{xj) = i 
\{si\{si}^d-Pj} i&e{xj) = o 

for all j e {l,...,n}. Obviously, for all it holds that Tj \= \U={pj). Now we 
will show that for all i e {1, . . . , m} there is a / e {1, . . . , n} such that s, e Tj. 
For this purpose let i e {l,...,m} and suppose C, is satisfied by 9{xj) = 1 

for a ; e {!,..., n}. Then, by definition of W, 7r(r^) = pj, hence {Sj} \= [Jpj 
and therefore s, e Tj. If, on the other hand, Q is satisfied by 6{xj) = then 

we have that Tz(r^-) = 0, hence {s,} |= □'~'P; and again it follows that s, e Tj. 
Altogether we have that for all / there is a / such that s/ e Tj. It follows that 
Ti u . . . u r„ = T and therefore W,T \= tp. 
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On the other hand assume W, T \= ip. Therefore we have T = u . . . u T„ 
with Tj \= n^ = {pj) for all ; e {l,...,n}. We define a valuation 6 by 



iff Tj h apj 
iff Tj h a^i 



Since every s, is contained in a Tj we know that for all f e {1, . . . ,m} there is 
a j e {1, . . . ,n} with {s,} |= □' = (p^). From this it follows that Xj occurs in Q 

(positively or negatively) since otherwise, by definition of W, both and 
would be reachable from s,. 

It also holds that {s,} |= CFpy or {s,} |= CF^py. In the former case we have 

that n{r^-) = pj, hence, by definition of W, Xj is a literal in C,. By construction of 
6 it follows that Q is satisfied. In the latter case it holds that Xj is a literal in C,. 
Again, by construction of 6 it follows that C, is satisfied. Hence, cp e 3SAT. ■ 

If we disallow both and v the problem becomes tractable since the non- 
deterministic steps in the model checking algorithm are no longer needed. 

Theorem 4.17. Let M c {□, a, ®, =}. Then MT>C{M)-MC is in P. 



Proof. Algorithm 4.2 is a non-deterministic algorithm that checks the truth 
of an arbitrary MT>C formula in a given structure in polynomial time. Since 
M c: {□, A, ®, =} it holds that 0/ v ^ M. Therefore the non-deterministic 
steps are never used and the algorithm is in fact deterministic in this case. ■ 

Note that this deterministic polynomial time algorithm is a top-down algo- 
rithm and therefore works in a fundamentally different way than the usual 
deterministic polynomial time bottom-up model checking algorithm for plain 
modal logic. 

Now we have seen that MVC{M)-MC is tractable if v ^ M and ^ M 
since these two operators are the only source of non-determinism. On the 
other ha nd, M VCjUyMC is NP-co mplet e if =(•) e M and either e M 
(Theorem 4.14| or v, □ e M (Theorem 4.15| . The remaining question is what 



happens if only v (but not □) is allowed. Unfortunately this case has to remain 
open for now. 

4.2.2 Bounded arity fragments 

We will now show that A4'DjCi^{v, =)-MC is in P for all k ^ 0. To prove 
this statement we will decompose it into two smaller propositions. 
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First we show that even the whole A1X'£(v, =) fragment with unre- 
stricted = (•) atoms is in P as long as it is guaranteed that in every input 
formula at least a specific number of dependence atoms - depending on the 
size of the Kripke structure - occur. 

We will need the following lemma stating that a dependence atom is always 
satisfied by a team containing at least half of all the worlds. 

Lemma 4.18. Let W = (S, R, zr) be a Kripke structure, (p := ={pi, . . . ,p„,q) 
(n > 0) an atomic formula and T ^ S an arbitrary team. Then there is a set T' 

such that \T'\ ^ ^ and T' \= (p. 

Proof. Let To := {s e T \ q ^ n{s)} and T^ := {s e T \ q e 7i{s)}. Then 
To u Tj = T and Tq n Tj = 0. Therefore there is an i e {1,2} such that 

I n 

|T;| ^ Let T' := T,-. Since q is either labeled in every state of T' or in no 
one, it holds that W, T' \= (p. m 

We will now formalize a notion of "many dependence atoms in a formula". 

Definition 4.19. For (p e M.T>C let ^{(p) be the number of positive depen- 
dence atoms in ^. Let ^: N IR be an arbitrary function and * e {< 
>,>,=}. Then 7WD£(M)-MC^^(„) (resp. 7WD£t(M)-MC^^(„)) is the 
problem MVC{M)-MC (resp. MVCi{M)-MC) restricted to inputs (W = 
(S, R, n), T, that satisfy the condition a{^) * i{\S\). ^ 

If we only allow v and we are guaranteed that there are many dependence 
atoms in each input formula then model checking becomes trivial - even for 
the case of unbounded dependence atoms. 

Proposition 4.20. Let M c {v, --,=}. Then MV C{M)-MC^ig^^(^^-^ is trivial, 
i. e. for all Kripke structures W = (S, R, n) and all cp e MT>C{M) such that the 
number of positive dependence atoms in <p is greater than log2(|S|) it holds for all 
T^S that W,T\=(p. 

Proof. Let W = {S,R, n), (p e MVC^M), T c S be an arbitrary instance 
with i > log2(|S|) positive dependence atoms in (p. Then it follows that 

1 = 1 ' V ' i 

'Pi 



where each /; is either a (possibly negated) atomic proposition or a negated 
dependence atom. 
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Claim 1. For alike {Q,..., £} there is a set <^ T such that W, |= Vf=i 
and |T\T,,| < 2 



The main proposition follows immediately from case A: = ^ of this claim: 
From \T\T(\ < 2^"^ = 1 follows that T = and from W, Ti \= VLi follows 
that W, T 1= ^. 

Proof of Claim 1 (inductive). For A: = we can choose 7\:= 0. For the 



inductive step let the claim be true for all k' < k. By Lemma 4.18 there is a set 



T( c= T\T^_i such that W, T( \= xp^ and |T^| > Let := T^^i u T(. 

Since W, Tj;_i |= Vti V'l it follows by definition of the semantics of v that 
V^, Tk h VLl ^i- Furthermore, 

\T\Tk\ = |(T\T,_i)\ni = inT,c-i|-|T(| 

< T = Z . -i 



Note that A1X'£(M)-MC->jog^(„) is only trivial, i.e. all instance structures 
satisfy all instance formulas, if we assume that only valid instances, i. e. where 
the number of dependence atoms is guaranteed to be large enough, are given 
as input. However, if we have to verify this number the problem clearly 
remains in P. 

Now we consider the case in which we have very few dependence atoms 
(which have bounded arity) in each formula. We use the fact that there are 
only a few dependence atoms by searching through all possible determining 
functions for the dependence atoms. Note that in this case we do not need to 
restrict the set of allowed AiVC operators as we have done above. 

Proposition 4.21. Let k^O. Then >lX'£j;-MC^iog^(„) is in P. 

Proof. From the semantics of =(•) it follows that =(pi, . . . ,pk,p) is equiva- 
lent to 



3ff{pi,...,pk)^p := 3/((-/(pi,...,pfc) vp) a(/(pi,...,p,,) v-p)) 

(4.1) 
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where /(pi, . . .,pif) and 3f(p - both introduced by Sevenster ISev09[ Sec- 
tion 4.2] - have the following semantics: 



W,T\= ^f(p 



iff there is a Boolean function such that 
(W,/^),Th</' 

(W,/'^), T h /(Pi, ■ ■ ■ , P/c) iff for all s e T and for all xi,...,x^e {0, 1} 

with x; = 1 iff Pi e 7r(s) (f = l,...,k): 

/^(xi,...,xO = l 
(W,/^), T h ^/(Pi, ■ ■ ■ , Pic) iff for all s e T and for all xj, . . . , e {0, 1} 

with Xj = 1 iff Pi e n{s) {i = l,...,k): 

/^(xi x^) =0 

Now let W = {S,R, n), T S and <p e JVIVC}; be a problem instance. 
First, we count the number (. of dependence atoms in ^. It I > logjdSj) 
we reject the input instance. Otherwise we replace every dependence atom 
by its translation according to Eq. ( |4.1^ (each time using a new fimction 
symbol). Since the dependence atoms in (p are at most A:-ary we have from 
the transformation Eq. | |4.1^ that the introduced function variables fi, ■ ■ ■ ,fi 
are also at most fc-ary. From this it follows that the upper boimd for the 
number of interpretations of each of them is 2^*. For each possible tuple 
of interpretations f^, . . . ,fj^ for the fimction variables we obtain an 
formula (p* by replacing each existential quantifier 3/, by a Boolean formula 
encoding of the interpretation (for example by encoding the truth table of 

with a formula in disjunctive normal form). For each such tuple we model 
check (p*. That is possible in polynomial time in |S| + |^* | as shown by Clarke 
et al. IICES86 I. Since the encoding of an arbitrary A:-ary Boolean function has 
length at most 2'^ and k is constant this is a polynomial in |S| + \(p\. 

Furthermore, the number of tuples over which we have to iterate is bounded 

by 

22*-i°g2(|s|) 



l0g2(|S|) 



(2}os2i\s\)y 



|S|0(i). 



With Propositions 4.20 and 4.21 we have shown the following theorem. 



Theorem 4.22. Let M <^ { v, =}, k^O. Then >JD£fc(M)-MC is in P. 

Proof. Given a Kripke structure W = (S, K, tt) and a MVCi^{v, ^, =) for- 
mula (p the algorithm counts the number m of positive dependence atoms in 
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Ifm > log2(|S|) the input is accepted (because by Proposition 4.20 the formula 
is always fulfilled in this case). Otherwise the algorithm from the proof of 
Proposition 4.21 is used. ■ 

And there is another case where we can use the exhaustive determining 
function search. 



Theorem 4.23. Let M 



{□,0,-,=}. Then MV£^{M)-MC is in P for every 



Proof. Let ^ e AAVCj^^M). Then there can be at most one dependence atom 
in <p because M only contains unary operators. Therefore we can once again 



use the algorithm from the proof of Proposition 4.21 
In Theorem 



4.14 



we saw that MVL{(), =)-MC is NP-complete. The pre- 
vious theorem includes AiV£i^{(), =)-MC e P as a special case. Hence, the 
question remains which are the minimal supersets M of {0/=} such that 
MV£k{M)-MC is NP-complete. 

We will now see that adding either a (Theorem 4.24 \ or v (Theorem 4.25| is 
already enough to get N P-completeness again. But note that in the case of v 
we need 1 while for k = the question remains open. 



Theorem 4.24. Let {(), a, 
every k ^ 0. 



M. Then MVC!,{M)-MC is HP -complete for 



Proof. Membership in NP follows from Proposition 4.12 For hardness we 
once again reduce 3 Sat to our problem. 

For this purpose let (p := A^^i arbitrary 3CNF formula built from 

the variables Xi, . . ., x„. Let W be the Kripke structure (S, R, n) shown in 
Figure 4.10 and formally defined by 

S : 



R 



{ci I f 6 {1, . . .,;«}} u {sj^i',Sj^j, I ;',/ e {1, ...,n}} 
u{tj,tj\ie{l,...,n}} 
{(c,-,sy) I Xj e Ci} u {(c,-,sy) I Xj e Q} 
^ {{sk,j'Sk+i,j) \ ie{l,...,n},ke{l,...,n-l}] 



u {{sk,j,Sk+i,j) \i_e {l,...,n},ke {1,. 
^ {{sk,j'ij)'ih,jJj) \ ie {l,...,n},ke 
u {{sk,j,ij),{sk,i'ii) \ ie {\,...,n},ke 



.,n-l}} 
l,...,n}} 
l,...,n},i ^ k) 



K{Ci) 


■■= 




■■= 


nisj^j,) 


■■= 


n{tj) 


■■= {rj,Pj} 


n(tj) 


■■= {rj}. 
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And let tp be the MVjC{0, a, =) formula 

= 0(0(ri A =(pi)) A 00(r2 A ={p2)) A ... A 0"(r„ a =(p„))). 

We again show that cp e 3Sat iff W, {ci, . . . , Cm} |= ^- First assume that 
6 3Sat and that is a satisfying valuation for the variables in <p. Now let 




Si y if Xj evaluates to true under 6 
Si y if Xj evaluates to false under 9 



for all = 1, . . . , n. Then it holds that W, {si, . . . , s„} |= A OK^j a ={pj)). 

Furthermore, since 6 satisfies (p it holds for aU f = l,...,m that there is a 
ji e {1, . . . ,n} such that (c,-, Sj.) e R. Hence, 

w,{ci,...,c„} HO (a ^=(P;))j- 
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For the reverse direction assume that W, {ci, . . . ,Cm} \= ip- Now let T c {sii, 

n 

si,i, si,2/ ■ ■ ■ ,s\,n} such that T \= /\ O^irj a =ipj)) and for all f = 1, . . . , m there 

;=i 

is a s 6 T with (c;, s) e _R. 

Since T |= O-'Vy a ={pj)) there is no / e {1, . . . , n} with ^ e T and also 
Sij 6 T. Now let 6 be the valuation of xj, . . . , x„ defined by 

^ ' [0 else. 

Since for each i = 1, . . . ,m there is a ; e {1, . . . , n} such that either (c;, sj j) e 
K and y e T or (c,-, Si e R and sj j e T it follows that for each clause C,- of (p 
there is a 7 e {!,...,«} such that Xj satisfies C, under 9. m 

Theorem 4.25. Let {0, v,=} c M. T/zen XI?£;,(M)-MC is NP -complete for 
every 1. 

Proof. As above membership in NP follows from Proposition |4 . 1 2 1 and for 
hardness we reduce 3Sat to our problem. 

For this purpose let (p := A/=i arbitrary 3CNF formula built from 

the variables pi, . . . ,p„. Let W be the Kripke structure (S, R, n) shown in 
Figure 4.11 and formally defined by 



S 
R 



{Ci^j I ie {l,...,m},i e {l,...,n}} 

^K;' I /'/ e {!'■■■'"}'/ 
{{ci,j,Ci,j+i) I ie {l,...,m},ie {1,...,m-1}} 
u {{xj^j,,Xj^j,+-i) l/e {l,...,n},/6 {1,...,;-1}} 
r {q,pj} iff/ =7 

iff/<7 
{q} iHpj,^pj(f;Ci 

{pj} iHpjeCi 

iff -py 6 Ci 



Let he the MVC formula 



WO'-'={q,Pj) 

= Pi) V <)={q, Pi) V 00=('?, ps) V . . . V ()"-^ = {q, p„). 

Once again we show that (p e 3SAT iff W, {ci 1, . . . , c,„ 1, xj 1, X2^i, . . . , x„ 1} |= 
^p. Intuitively, the part of the structure comprised of the states Xj^ji (pictured in 
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Figure 4.11: Kripke structure corresponding to a 3CNF formula containing 
the clauses Q = -^p2, C2 = p2 v -■ps and C3 = -■pi 



the right part of Figure 4.11 1 together with the subformulas 0^^ = ('?/ Pj) for 
j = 1, . . . ,n ensures that (tor the subteam corresponding to the jih disjunct of 
ip) at the yth level (where the levels are counted from 1) pj is labeled wherever 
q is labeled. But since in the chains in the c, y part of the structure it never 
happens that pj is labeled if q is labeled it follows that the fth chain cannot 
belong to the subteam corresponding to the 7th disjunct of ip if q is labeled at 
its jih level, and, by definition of W, the latter is the case iff neither pj nor ^pj 
occurs in C, . 

More precisely, first assume that <p e 3 Sat and that is a satisfying valuation 
for the variables in <p. Now let Pj := {c, j | C, is satisfied by pj under 6} for all 

n 

j = 1, . . . ,n. Then it follows that |J Pj = {C14, . . . , c,„ 1} and that 

^N,Pj^Oi-\^qA={pj)) 

for all 7 = 1, ... , n. Additionally, it holds that W, {x^- 1} |= O^^H^ ^ =iPj)) for 
j = l,...,n. 

Together it follows that W, Pj u {x^ 1} |= ()i^^ = {q, pj) for all = 1, . . . , n. 
This implies 

W,y(Pyu{Xp})hVO^-^ = (<?,P;) 
;=1 ;=1 

which is equivalent to 



W,{ci 
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For the reverse direction assume that W, T \= ip with T := {cj i, . . . , i, 
1, X2,i/ ■ ■ ■ / Let Ti,...,T„ be subsets of T with u . . . u T„ = T such 
that for all / e {l,...,n} it holds that T,- |= 0''^^ = ('?, P;)- Then it follows 
that Xi i e Ti since the chain starting in xi i consists of only one state. From 
7r(xi4) = {q, pi} and 7t(x2,i) = {q} it follows that X2,i ^ Ti and hence (again 
because of the length of the chain) X2,i e T2. Inductively, it follows that x^ i e Ty 
for all j = l,...,n. 

Now, it follows from Xyi e T,- that for all i e {l,...,m} with c,-i e Ty: 
q ^ 7r(Cj j) (because (7, pj e 7z{xj^j, pj ^ n{xi^j)). Since Tj |= 0-'^^ = (^J/ Pj), it then 
holds that T,\{xp} h 0''"^^'? a =(P;)). 

Now let 6 be the valuation of pi, . . . , p,, defined by 




1 ifT^-\{xp} hO^'-i(-'?Apy) 

ifTy\{Xy,i}hO^-n-'?A^p^)- 



Since for each i = 1, . . . ,m there is a j e {1, . . . ,n} such that c, j e Ty it 
follows that for each clause C, of (p there is a y e {1, . . . , n} such that pj satisfies 
Ci under 6. m 

4.2.3 Classical disjunction 

Finally, we investigate some remaining fragments which allow the classical 
disjunction operator. Therefore we first show that classical disjimction can 
substitute zero-ary dependence atoms. 

Lemma 4.26. Let =, ® ^ M. Then 

MV£o{M u {=})-MC sgj^ MV£{M u {®})-MC. 



Proof. Follows immediately from Lemma 3.1^ j and Lemma 4.11 



The following surprising result shows that both kinds of disjunctions to- 
gether are already enough to get NP-completeness. 



Theorem 4.27. Let 



v,®| 



M. Then A^X'£j.(M)-MC is -complete for every 



Proof. As above membership in NP follows from Proposition |4 . 1 2 1 and for 
hardness we reduce 3SAT to MT> Cj^{y , ®)-MC - using a construction that 
bears some similarities with the one used in the proof of Theorem |4.25[ 
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For this purpose let (p := A!=i arbitrary 3CNF formula built from 

the variables pi, . . . ,p„. Let W be the Kripke structure (S, R, n) shown in 
Figure 4.12 and formally defined by 



S 
R 

n{ci) 



{Ci I ie {!,..., m}} 



{Pj I Pj e Q} u {qj I --pj e Q 



© © 



Pi,q2 



pi, 



Figure 4.12: Kripke structure corresponding to a 3CNF formula containing 
the clauses Q = pi v ^p2, C2 = pi v and C3 = -■pi v p^ 



Let 1/; be the TWD/: formula 



\/{pj&qj)- 



Once again we show that (p e 3SAT iff W, {ci, . . ., c,,,} \= ip. First assiome 
that (p e 3Sat and that is a satisfying valuation for (p. Now let 

Pj := {ci I C, is satisfied by pj under 6} 
for all 7 = 1, ... , n. Then it follows that |J)=i Pj = {"^i' ■ ■ ■ ' '^'"1 that 

W,P,' hP;®'?;• 
for all 7 = 1, . . . , M. Together it follows that 

n 

W,{ci,...,c„,} h V(P/®^/)- 

For the reverse direction assume that W,T \= ip with T := {cj, . . . , Cm}. Let 
Ti, . . . , T„ be subsets of T with Ti u . . . u T„ = T such that for all j e {1, . . . ,n} 
it holds that T, |= pj ® £jy. Now let 6 be the valuation of pi, . . . , p„ defined by 



10 ifT^ h^r 
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Since for each i = 1, . . . ,m there is a / e {!,... ,n} such that c; e Tj it follows 
that for each clause C; of cp there is a / e {1, . . . ,n} such that pj satisfies C, 
under 0. ■ 



Now we show that Theorem 4.23 still holds if we additionally allow classical 
disjunction. 

Theorem 4.28. Let M c <), ®, ^, =}. Then XD£fc(M)-MC is in P for every 

Proof. Let <p e MVC{M). Because of the distributivity of ® with all other 
AiVC operators (cf. Lemma 4.] ij there is a formula ip equivalent to cp which 
is of the form 

\<P\ 

with ipi e MVC{M\{Q>}) for all i e {1,. . ., |^|}. Note that there are only 



linearly many formulas i/', (in contrast to exponentially many in Lemma |4l ij 
because (p does not contain any binary operators aside from ®. Further note 
that ip can be easily computed from cp in polynomial time. 

Now it is easy to check for a given structure W and team T whether W,T \= 
ip by simply checking whether W,T \= ipi (which can be done in pol}momial 
time by Theorem 4.23 1 consecutively for all f e {1, . . . , |(^| }. ■ 



4.3 Conclusion 



Tables 



4.1 



to 



4.4 



give a complete overview of our complexity results. Note that 



all possible combinations of operators are included in each table. 



4.3.1 Satisfiability 

In this thesis we completely classified the complexity of the satisfiability 
problem of modal dependence logic for all fragments of the language defined 
by restricting the modal and propositional operators to a subset of those 
considered by Vaananen and Sevenster. Our results show a dichotomy for 
the unboimded arity =(•) operator; either the complexity jumps to NEXP- 
completeness when introducing = ( • ) or it does not increase at all - and in the 
latter case the =(•) operator does not increase the expressiveness of the logic. 
Intuitively, the NEXP-completeness can be understood as the complexity of 
guessing Boolean fimctions of unbounded arity. 
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An interesting question is whether there are natural fragments of modal 
dependence logic where adding the dependence operator does not let the 
complexity of satisfiability testing jump up to N EXP but still increases the 
expressiveness of the logic. This question can be answered by restricting 
the arity of the =(•) operator. In this case dependence becomes too weak to 
increase the complexity beyond PS PACE. However, in the case of poor man's 
logic, i. e. only disjunctions are fobidden, the complexity increases to S3 when 
introducing dependence but still it is not as worse as in the case of full modal 
logic. Intuitively, the complexity drops below NEXP because the Boolean 
functions which have to be guessed are now of a bounded arity. 



4.3.2 Model checking 



In this thesis we showed that MVC-MC is NP-complete ( Theorem |4. 13 1. Fur 



thermore we have systematically analyzed the complexity of model checking 
for fragments of AiVC defined by restricting the set of modal and proposi- 
tional operators. It turned out that there are several fragments which stay 
N P-complete, e. g. the fragment obtained by restricting the set of operators to 
only □, V and = (Theorem 4.15| or only and = (Theorem |4.14| . Intuitively, in 



the former case the N P-hardness arises from existentially guessing partitions 
of teams while evaluating disjunctions and in the latter from existentially 
guessing successor teams while evaluating operators. Consequently, if we 



allow all operators except and v the complexity drops to P (Theorem 4.17 1. 

For the fragment only containing v and = ( • ) on the other hand we were 
not able to determine whether its model checking problem is tractable. Our 
inability to prove either N P-hardness or containment in P led us to restrict the 
arity of the dependence atoms. For the aforementioned fragment the complex- 



ity drops to P in the case of bounded arity (Theorem 4.22 \. Furthermore, some 
of the cases which are known to be N P-complete for the unbounded case drop 
to P in the bounded arity case as well (Theorem 4.28| while others remain 



NP-complete but require a new proof technique (Theorems 4.24 and |4.25l . 
Most noteworthy in this context are probably the results concerning the Q 
operator. With unbounded dependence atoms this operator alone suffices to 
get N P-completeness whereas with bounded dependence atoms it needs the 
additional expressiveness of either a or v to reach N P-hardness. 

Considering the classical disjunction operator ®, we showed that the com- 
plexity of A4T>£if{M u {=})-MC is never higher than the complexity of 
MT>jC.]({M u {®})-MC, i.e. ® is at least as bad as =(•) with respect to the 
complexity of model-checking (in contrast to the complexity of satisfiability; 



cf. Table 4.2 1. And in the case where only v is allowed we even have a higher 
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complexity with ® (Theorem |4^27j than with = (Theorem 4.22^ . The case of 
A4T>£{v, ®)-MC is also our probably most surprising result since the non- 
determinism of the V operator turned out to be powerful enough to lead to 
N P-completeness although neither conjunction nor dependence atoms (which 
also, in a sense, contain a kind of "semi-atomic conjunction") are allowed. 

Interestingly, in none of our reductions to show NP-hardness the MVC 
formula depends on anything else but the number of propositional variables 
of the input 3CNF formula. The structure of the input formula is always 
encoded by the Kripke structure alone. So it might seem that even for a fully 
fixed formula the model checking problem could still be hard. This, however, 
cannot be the case since, by Proposition 4.21 model checking for a fixed 
formula is always in P. 

Another open question, apart from the unclassified unbounded arity case. 



is related to a case with bounded arity dependence atoms. In Theorem 4.25 



we were only able to prove N P-hardness for arity at least one and it is not 
known what happens in the case where the arity is zero. Additionally, it might 
be interesting to determine the exact complexity for the cases which are in P 
since we have not shown any lower bounds in these cases so far. 



4.3.3 Open problems 

In a number of precursor papers, e. g. fLew79] on propositional logic or 
llHSSlO l on modal logic, not only subsets of the classical operators {□,<>/ 
A, V, — '} were considered but also propositional connectives given by arbi- 
trary Boolean functions. Contrary to classical propositional or modal logic, 
however, the semantics of such generalized formulas in dependence logic is 
not clear a priori - for instance, how should exclusive-or be defined in depen- 
dence logic? Even for simple implication there seem to be several reasonable 
definitions, cf. Section [L5] and 1AV09|. 

A further possibly interesting restriction of dependence logic might be to 
restrict the type of functional dependence beyond simply restricting the arity. 
Right now, dependence just means that there is some function whatsoever 
that determines the value of a variable from the given values of certain other 
variables. Also here it might be interesting to restrict the function to be taken 
from a fixed class in Post's lattice, e. g. to be monotone or self-dual. 

Finally, it seems natural to investigate the possibility of enriching classical 
temporal logics such as CTjC, CTC or CTC* with dependence as some of them 
are extensions of classical modal logic. The questions here are of the same kind 
as for A^2?£: expressivity, complexity, fragments (cf. BMeilll for a systematic 
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study of several classical temporal logics with respect to the complexity of the 
satisfiability and the model checking problem for fragments). 



4.3 Conclusion 
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Operators 

T 1 



= (•) 



® 



Complexity 



Reference 



* 

+ 



+ 
+ 



+ 



+ 



+ 



NEXP 
PSPACE 
PSPACE 

^2 
^2 

coNP 
coNP 



Theorem 4.4 
Theorem |4. 4 



Theorem 4.5 
Corollary O i 
Corollary O 3 



lLad77l , ilDLN+92l 



Corollary 4.3 : 



+ 



- + 

- + 

* — 

* — 

* * 

* — 



+ 



NP 
NP 
NP 
NP 

P 

P 

P 

P 

P 

trivial 
NP 
NP 

P 

P 



4.7 1 



57 



Corollary 
Corollary 
Corollary 
Corollary ^ 
Corollary 5!7 
Corollary J!7 d 
Corollary J!7 : 
Corollary 5!7 : 



Corollary 1!7 i 
Corollary O i 



IICoo71l 

lCoo71], Q)=v 
Corollary 4.3 ; 
Corollary O ' 



+ : operator present — : operator absent * : complexity independent of operator 

Table 4.1: Classification of complexity for fragments of A^X'£-Sat 
All results are completeness results except for the P cases which are upper bounds. 
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Operators 






Complexity 


□ 





A 


V 




T 


1 


= (•) 


® 
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+ 


+ 


+ 
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* 


PS PACE 
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+ 


+ 


+ 


- 


* 


+ 


* 


* 


PS PACE 
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+ 


+ 


- 


+ 


* 


* 


+ 


* 


^3 


+ 


+ 


+ 


— 


+ 


* 


* 


- 


+ 


^2 
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+ 


+ 


- 
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* 


+ 


^2 
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+ 
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+ 


* 
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- 


- 
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+ 
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- 
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+ 


+ 
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* 
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* 


NP 


- 


+ 


+ 


+ 


+ 


* 


* 


* 


* 


NP 


+ 


- 


+ 




+ 


* 


* 


* 


+ 


NP 




+ 


+ 




+ 


* 


* 


* 


+ 


NP 


+ 




+ 




+ 


* 


* 


* 




P 




+ 


+ 




+ 


* 


* 


* 




P 


+ 




+ 


* 




* 


* 


* 


* 


P 




+ 


+ 


* 




* 


* 


* 


* 


P 


* 


* 




* 


* 


* 


* 


* 


* 


P 


* 


* 


* 


* 




* 




* 


* 


trivial 






+ 


+ 


+ 


* 


* 


* 


* 


NP 






+ 


* 


+ 


* 


* 


* 


+ 


NP 






* 




* 


* 


* 


* 




P 






* 


* 




* 


* 


* 


* 


P 



Reference 

Corollary|4.10t 
Corollary 
Corollary 
Theorem 4.4 

Theorem 4A 

IILad77l , iDrN+92l 



4.10? 



Corollary 4.3 



Corollary 4.7 1 
Corollary 5!7 1 
Corollary 5!7 1 
Corollary J!7 1 
Corollary 5!7 d 
Corollary 5!7 j 
Corollary 5!7 : 
Corollary 5!7 : 
Corollary 1!7 i 
Corollary O i 
IICoo71l 

|Coo71], ® = V 
Corollary 4.3 ; 
Corollary O ' 



+ : operator present — : operator absent * : complexity independent of operator 

Table 4.2: Classification of complexity for fragments of MVjCj^-Sat for A: > 3 
All results are completeness results except for the P cases which are upper bounds. 
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□ 


operators 

A V — ' 


= (•) ® 


Complexity 


Reference 


* * 


+ + * 


+ * 


N P-complete 


Theorem 


4.13 




+ * 


* + * 


+ * 


N P-complete 


Theorem 


4.15 




* * 




* + 


N P-complete 


Theorem 


4.27 




* + 


* * * 


+ * 


N P-complete 


Theorem 


4.14 




* + 


+ * * 


* + 


N P-complete 


Theorem 
Lemma 4 


4.24 
.26 
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+ - 


inNP 


Proposition 4.12 


* * 


— — * 


— * 


in P 


Theorem 


4.28 





* — 


* — * 


* * 


in P 


Theorem 


4.1^ 




* * 


* * * 




in P 


IICES86I 



+ : operator present — : operator absent * : complexity independent of operator 



Table 4.3: Classification of complexity for fragments of AiVC-MC 



□ 


operators 

A V — ' 
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Complexity 
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+ + * 
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N P-complete 


Theorem 


4.13 




+ * 


* + * 


+ * 


N P-complete 


Theorem 


4.15 
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* + * 


* + 


N P-complete 


Theorem 


4.27 




* + 


+ * * 


+ * 


N P-complete 


Theorem 


4.24 




* + 


+ * * 


* + 


N P-complete 


Theorem 
Lemma 4 


4.24 
.26 




* + 


* + * 


+ * 


N P-complete 


Theorem 


A.15 




* * 


— — * 


* * 


in P 


Theorem 


4.28 




* — 
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* * 


in P 


Theorem 


AAV 






— * * 


* — 


in P 


Theorem 


4.22 




* * 


* H« * 




in P 


ICES86J 



+ : operator present — : operator absent * : complexity independent of operator 
Table 4.4: Classification of complexity for fragments of MVCj^-MC for 1 



Chapter 5 



Modal Intuitionistic 
Dependence Logic 

5.1 Model checking 

In this section we study the complexity of model checking for fragments of 
M.XT>C, i. e. we extend the results from Section |4r2| 

For this purpose first note that Boolean constants as well as negation do 
not influence the complexity of the model checking problem for AilVC, 
i. e. Lemma |4lT] holds for MTVC as well as for MVC. 

We begin by stating a PSPACE algorithm for MTVC-MC. 

Theorem 5.1. MTVC-MC is in PSPACE. 

Proof. We state an AP algorithm to prove the theorem. 

Algorithm 5.1: check(J<: = (S, R, n),(p,T) 

case (p 

when (p = J, L, f, -^p, ={pi, . . . , p„) , f ^ X> f&X> f ^ X> □'/'' 



proceed according to Algorithm 4.2 (guessing steps are existential guessing steps) 
when cp = tp X 
universally guess a set of states T' c T 
if not check(X, tp, T') or check(J<C, x, T) 

return true 
return false 

Most of the cases in the algorithm are deterministic. Only the cases cp = ip v x 
and (p = ()ip include non-determrnistic existential branching and the case 
(p = ip ^ X includes non-determrnistic universal branching. Altogether, the 
algorithm can be implemented on an alternating Turing machine running in 



pol5momial time or - equivalently (cf. Definition 2.14 and ICKS81J ) - on a 
deterministic machine using polynomial space. ■ 
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If we forbid v and the complexity of the above algorithm drops to coNP. 

Corollary 5.2. MXVC{n, a, ®, =)-MC is in coNP. In particular, VXVL- 
MC is in coNP. 



Proof. In Algorithm 5.1 existential guessing only applies to the cases = 
^ \/ X arid ^ = ()^- ■ 

If neither =(•) nor © are allowed in the logic the model checking problem 
can even be decided in deterministic polynomial time. 

Theorem 5.3. MIVjC{[J, 0, a, v, ^)-MC is in P. 

Proof. Let cp be an arbitrary MI'DjC{C\,(), a, v,^, ^) formula. Starting 



from the innermost intuitionistic implication by applying Lemma 3. IS 
we may eliminate all the connectives ^ in and obtain an equivalent A4 £ 
formula ^* . 

The translation from (p to (p* can clearly be done in polynomial time and, 
by IICES86I , MC-MC is in P. Hence, MIVC{a 0, a, v, ^)-MC is in P as 
well. ■ 

In the remaining part of this section we provide hardness proofs for model 
checking problems for various sublogics of A4IT>C We first consider the 
sublogic without and v . 

Theorem 5.4. PJD£(a,®,^)-MC is coNP-hard. 

Proof. We give a polynomial-time reduction from 

Taut := {4> e CC \ 4> is a tautology} 

to VIVC-MC = VIV£{a,&, ^, =)-MC, which implies the desired result 
since 

PXP£(a,®,-,^,=)-MC =^ PXD£(a,®,-,^)-MC 

=P PXD£(a,®,^)-MC, 



by Lemma 3.19 and Lemma 4.11 



For this purpose let cp be an arbitrary propositional formula - w. 1. o. g. in 
negation normal form - and let Var{(p) = {pi, . . . , p„}. Let K = {S,R, n) be the 



Kripke structure shown in Figure 5.1 and formally defined by 
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n 
Pi 



te) 

Pi 



n 



Figure 5.1: Kripke structure in the proof of Theorem 5.4 



Finally, let ip e VIVjC be defined by 
with 

n 

■■= /\{ri^={Pi)) 
and defined by the following inductive translation: 



® ip' 



Now we will show that (p e Taut iff K, S \= ip. 

Suppose (p e Taut. Let T c S be an arbitrary team such that K,T \= a.„. 
Then there is a T' 3 T such that for all 1 ^ f ^ n exactly one of the states s, 
and s7 is in T'. Now let cr be the truth assignment defined by 



c'iPi) ■-- 



T if e r, 
1 ifsjeT'. 



Claim 1. For all subformulas x^f'P holds that a satisfies x iffK, T' \= x^- 

Proof OF Claim 1 (inductive). Case ;t = p,: First suppose t7(p,) = T. 
Then for all teams T" c T' with K, T" \= r, it holds that T" c {s„s7}. Further- 
more, by definition of T', T' n {s,-,s7} = {s,}. Hence, T" c {s,} and K, T" \= pj. 
Since T" was chosen arbitrarily this imp Lies K,T' \= pi. Conversely 
suppose that cr{pi) = 1. Then T' n {s/,S;} = {s;} and therefore T' ^ r, p,-. 
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Case X = ~'Pi- Analogous iox= Pi- 
Case = T V 0: cr satisfies x 

iff a satisfies r or a satisfies 6 

iff, by induction hypothesis, K, T' \= or K, T \= 6^ 

iff, by the semantics of ®, K, T \= ® 6^. 
Case = T A 0: Analogous to = ^ 0. * 

Since (p e Taut, it holds that a satisfies (p. By Claim[l]it fo llows that K, T \= 
(p^ and, by the downward closure property (Proposition 3.14^ , K,T \= (p^. 



Since T was chosen arbitrarily with K,T \= an, this implies K,S \= ^■ 

Conversely suppose that K,S\=tp and let u be an arbitrary truth assignment 
for pi, . . . , pn- Let T := {s,- | cr{pi) = T} u {sj | cripi) = 1}. Then, obviously, 
K,T \= 0L„, thus K,T \= (p^ and, by Claimjlj a satisfies (p. Since a was chosen 
arbitrarily, (p e TAUT. ■ 

Theorem 5.5. VTVL-MC is coHP -complete. Furthermore, MIVjC{M)-MC is 
coNP -complete for all {a,®,^} c M c {□, a,®,-,^,=}. 

Proof. Follows directly from Corollary |5 .2 1 and Theorem |5.4| ■ 

Next, we analyze the complexity of model checking for fragments of 
A4IT>C containing v and 

Theorem 5.6. Let {a, v,^,=} c M. Then MI'D£{M)-MC is PSPACE-com- 
plete^ 



Proof. The upper bound follows from Theorem 5.1 For the lower bound 
we give a reduction from 3CNF-QBF, which is well-known to be PSPACE- 
complete. Let ip = Vxi3x2 ■ ■ ■ Vx„_i3x„ (phe a 3CNF-QBF instance with (p = 
Ci A • • • A Cm and 

Cj = OLjQ V dji V 0Lj2 (1 ^ 7 m) 

for, w. 1. o. g. , distinct ocjQ, xji, a^. We further assume w. 1. o. g. that n is even. 
Then the correspodrng A4IT>jC,{/\, v, =)-MC instance is defined as (K = 
(S, R, n), S, 6), where 

• S:={s2,...,Sjj,S]^,...,Sfj}, 

• R-=0, 

• Prop := {ri, . . . ,r„,pi, . . . ,p„,ci, . . . , c^, c^, c„,o, cn, c„,i, c^, 

■ ■ ■ , Cml} 



^Note that MIVC{f\, v, ^, — >, =) is a variation of VIVC where ® has been replaced by v. 
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n{si) 



7t(s,-) 



{ri,pi} u {cj,Cjo I OLjo = Xi, l^i ^ m) 
U {Cj,Cji I OLji = Xi, 1 < 7 wi} 
U {Cj,Cj2 I ay2 = X;, 1 < 7 Wz}, 

{r,} u {cy,cyo I ayo = ^Xi, 1 j ^ m} 

U {Cy,Cyi I ayi = -X,-, 1 <7 



see Figure 5.2 for an example of the construction of K, 
• 6 := Si, where 



Sn 



{rik-i ={P2k-i)) 

i^lk ^ ={P2k)) V %+l 

(r„ A =(p„)) V (p', 



hk (l<fc<n/2), 
(1 < < n/2). 



i.e. e= (ri ^ =(pi)) ^ [iji A =(p2))v 

- ={Pn-i)) - ((n, A =(p„)) V cp')) •••))), 

and 




Cl,Cio C2,C2l 



Figure 5.2: Kripke structure corresponding toip = Vxi3x2Vx33x4((-'Xi v X2 v 

X3) A (Xj V -'X2 V X4)) 
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We will now show that ip e 3CNF-QBF iff K,S\=e. 

The general idea is that the alternating and v operators simulate the 
3CNF-QBF formula's V and 3 quantifiers, respectively. Therefore we start 
with the team of all states and then for every nesting level i of — > or v we drop 
one of the states s, and sj. We do this until we arrive at a team that contains 
exactly one of the states s,- and sj for each f e {!,...,«}. This team corresponds 
to a truth assignment a for Xi, . . . , x„ in a natural way and it satisfies (p' iff a 
satisfies (p. 

For the universal quantifiers we have that f52/c-i is satisfied in a team T iff 
is satisfied in all maximal subteams T2k-i £ T which satisfy 7'2J:-i ^ =(P2;c-l)/ 
i. e. all maximal subteams containing only one of the states S2k-i and S2k-i- 
For the existential quantifiers S2k is satisfied in T iff T can be split into T2k 
and T2J. such that K, T2k \= S2k+i and K, T^^. \= r2k a ={p2k), i- e. Sik+i has to be 
satisfied in a team with only one of the states S2k and since T^j. Q [s2k, si^} 
and |T^,| 1. 

More precisely, first suppose that ^ e 3CNF-QBF. Then for every partial 
truth assignment cr \ {xi,X3, . . . ,x„_i} : {xi,X3, . . . ,x„_i} ^ {T, 1} there is a 
complete truth assignment cr: {xi, X2, ■ ■ ■ , x„} {T, _L} such that a satisfies (p 
and (7{x2k) only depends on (7{xi), cr{x3), . . .,cr(x2k-i) (for all ke {1, . . . ,n/2}). 

We now have to show that 

X,Sh(''i^=(Pi))^^2. 

By the downward closure property (Proposition 3.14| , it suffices to show that 
for the maximal teams Tj c S such that K, Ti |= ri ^ =(pi)/ namely the teams 
Ti = S\{si} and Tj = S\{sT}, it holds that 

X,Ti 1= S2,i.e. K,Ti \= (r2 a =(p2)) v S^. 

Choose the value of cr{xi) according to Ti by letting 

^^^1^- I 1 ifTi = S\{sT}. 
Note that a{xi ) is defined as the complement of the canonical truth assignment 



corresponding to Ti - which was used in the proof of Theorem 5.4 We are 
going to continue to define the truth assignment as the complement of the 
canonical one. The reason for this will become clear when we show the 
connection between cp and (p' in the end. 

Now we split the team Ti into T2 and according to the value of u(x2) 
(which is defined by the above assumption following from ip e 3CNF-QBF) 
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as follows: 



7^/ ._ I {S2} ifcr{x2) = T, 

I {s^} ifa{X2)=l, 



and T2 = Ti\T2- Clearly, X, |= J'2 =(P2) and it suffices to check that 

We know that to show K,S \= Si it is enough to show that for every Tj (as 
constructed above) there is a T2 (as constructed above) such that K, T2 \= S^. 
By repeating the same arguments and constructions n/2 times, it remains to 
show that K, T„ \= (p' . Now, T„ and a are rnterdependently defined by 



T if T„n {s,,s,} = {s,} 

1 if T„ n {s/,s/} = {s;} 



(5.1) 



and a satisfies (p, i. e. for all j e {1, . . . , m} it holds that cr^ocjo) = T, cr(ayi) = T 
or (T{aj2) = T. 

Now let i e {1, . . . ,m] be arbitrarily chosen, let, for example, ayo = 
oiji = -'Xjj, 0Lj2 = (for some r'o, !i, ^2 e {1/ ■ ■ ■ / w}) and let w. 1. o. g. cr(aji) = T, 
i.e. cr(x/j) = _L. Let T' c T„ be arbitrarily chosen such that K, T' \= Cj. T hen, 



by construction of K, it holds that T' c {sJ^^Sj^^Si^} and, by Eq. |5.1 > and 
T' c T„, we further obtain that sj^ ^ T' . Hence, T' c Jjjg, s,^ }, i. e. \T'\ 2, and 
therefore 

K,T' h ( = (C;0) A =(Cyi) A ={Cj2)) V ( = (Cyo) A =(Cyi) A =(92)). 

Since / was chosen arbitrarily it follows that K, T„ \= (p'. 

Conversely, suppose K,S \= 0. By reversing the arguments and construc- 
tions from above and again repeating them n /2 times, we arrive at the interde- 



pendence from Eq. ( 5.1 1 again. The crucial observation is that when evaluating 
{^2k-l ^ =(P2yt-l)) ^ S2k we only need to consider the maximal teams satis- 
fying r2/c_i = {p2k-i) arid there are exactly two of those, one without S2/c_i 
and the other one without S2k-i- And when evaluating {r2k a ={p2k)) ^2fc+i 
we have to consider only the complements of the maximal teams satisfying 
^2k A ={p2k) arid again there are exactly two, one without S2t: and the other 
one without $2^. 

It remains to show that u satisfies (p. That is to show that u satisfies ctj^ v 
a, J V a, 2 for an arbitrarily chosen j e {1,. . .,m}. Suppose, for example. 
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Now let T' c T„ be the maximal team such that K, T' \= Cj. Then, by construc- 
tion of K, we have that T' c {s,q, s/^, s]^^}. Since K, T„ \= cp' it holds that 

K,T' \= { = {Cjo) A ={Cji) A =(Cp)) V {={Cjo) A =(c^-i) A ={Cj2)) 

and thus, by construction of K, it follows that |T'| 2. S ay s ,-^ ^ T', then, 
by maximality of T', we obtain that S/^ ^ T„ which, by Eq. (|5.1b, means that 
<7(x,j) = T, i. e. cr(a^ J = T. Hence, as / was chosen arbitrarily, it follows that cr 
satisfies cp. m 

Finally, we study the model checking problem for sublogics of A4I'DjC 
including and ®. 

Theorem 5.7. Let {0, a,®,^} c M. Then MIT>C{M)-MC is PSPACE-com- 
plete. 



Proof. The upper bound again follows from Theorem 5.1 For the lower 
bound we give a polynomial-time reduction from QBF to A4I'D£{(), a, ®, — 
=)-MC, which implies the desired result since 

7WXD£(0,A,®,-,^,=)-MC =^ 7WXD£(0, A,®,-,^)-MC 

=P 7WXP£(0,A,®,^)-MC, 



by Lemma 3.19 and Lemma 4.11 



Let ip = Vxi3x2 ■ ■ ■ Vx„_i3x„ with n even and (p quantifier-free. The 
corresponding A1XX'£(0, a, ®, — =)-MC instance is defined as {K = 
(S, R, n), T, 9) where 

• S := U Si, R := [j K,- and for 1 f m/2 



Rii-i 



{S2/,S^} U {ti} U {til,-- ■ 
{(S2/-l/S2,-l), (S2i-l,S2;-l)} 
{{UJil), iUlJil), - ■ ■ , {ti{i-2)'U{i-l))} 
^{(^■(i-l)'S2i)'(f,(i-l)'S2;)} 
'^{{S2i,S2i),{S2i,S2i)} 



Tz{Sj) 

n{sj) 



{rj, Pj}, 
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. n{t) : 

see Figure 



• 6 = Si, where 



, fort ^ {sj,Sj I 1 7 n}, 
for the construction of K, 

n, i odd} u {ti | 1 f n/2}; 



5.3 



hk-i 
S„ 



= {r2k-l ^ =(P2/C-1)) ^ (1 ^ < w/2), 
=0^2M {l^k<n/2), 



i.e. 



((ri^=(pi))-0 



•0 



and is generated from ^ by the same inductive translation as in the 



proof of Theorem 5.4 



Analogously to the proofs of Theorem 5.6 and Theorem 5.4 we will show 
that e QBF iff K,T \= 6. The idea, analogous to the proof of Theorem 5.6 is 
that the alternating and operators simulate the QBF formula's V and 3 
quantifiers, respectively. Therefore we start with the team of all states in the 
beginning of the chains and then for every nesting level i of we drop one of 
the states S21+1 and S2;+i while for every nesting level ; of we simultaneously 
move forward in the chains and thereby choose one of the states S2/ and s^i- 
We do this imtil we arrive at a team that contains exactly one of the states s, 
and s7 for each / e {1, . . . ,n}. This team corresponds to a truth assignment 
a for Xi, . . . , x„ in the canonical way (as in the proof of Theorem 5.4 1 and it 
satisfies cp^ iff a satisfies ^. 

Now suppose that ip e QBF. Then by applying the same arguments as in 
the proof of Theorem 5.6 (but with the canonical instead of the complementary 
mapping between truth assignments and teams) we get a team Ti and values 
for u(xi) and cr{x2)- Depending on this we choose T2 e (Tj) as follows: 



R{Ti)\{^} 

R{Tl)\{S2} 



if a{x2) = T, 
if (7(X2) = 1, 



Now it suffices to check that K, T2 \= S^- And, again analogous to the proof 
of Theorem 5.6 by repeating the universal and the existential arguments n/2 
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rn-VPn-l 




<>■■■ <y 




Figure 5.3: Kripke structure in the proof of Theorem 5.7 



times, it remains to show that K, T„ \= <^~*. And, analogous to Eq. ( |5.1| (except 
for not taking the complement), T„ and a are interdependently defined by 



cr{Xi) : = 
T„ n {s,,s7} : 



T if T„ n {s/,s7} = {s,} 
1 if T„ n {Si,si} = {s~i} 
;s,j if a{xi) = T 
[Si} if o-{xi) = 1 



for i e {1,3, . . . , « — 1}, 
for i e {2,4,. . .,«}. 



(5.2) 



Now, by Claimjljin the proof of Theorem 5.4 (T' there is of the same structure 
as T„ here and (p^ does not contain any modalities), it holds that K, Tn \= cp^ 
since, by assumption, a satisfies cp. 

Conversely, suppose that K,T \= 9. As in the proof of Theorem |5.6| we 
can reverse the above constructions and arrive at the interdependence from 
Eq. ( 5.2 1 again. The crucial point is that when evaluating '0'^2/c+l we only have 



to consider minimal successor teams. 

Now, as above, by Claim 1 in the proof of Theorem 5.4 it holds that a 
satisfies (p since, by assumption and by the construction of T„, K, Tn \= (p^ . ■ 



5.2 Conclusion 
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5.2 Conclusion 

We have shown that model checking for M.XT>C in general is PSPACE-com- 
plete and that this still holds if we forbid □ and =(•) together with either or 
V. For VTDC (where neither □, nor v are allowed) the complexity drops 
to coNP. All our results are listed in Table ISTI 





Operators 




Complexity 


Reference/ 
Method 


□ 


A V ® ^ 




= (•) 








* * 


+ + * * 


+ 


+ 


PS PACE 


Theorem 


5^ 


* * 


+ + + * 


+ 


* 


PS PACE 


Theorem 


5.6l 












Lemma 13. 19b I 
Lemma 13. Idbl 


* + 


+ * + * 


+ 


* 


PSPACE 


Theorem 


57\ 


* — 


H h * 


+ 


* 


coNP 


Theorem 


53^ 


* * 




* 




P 


Theorem 


53^ 


* * 


* * * * 




* 


P / NP 


see Table 


43^ 



+ : operator present — : operator absent * : complexity independent of operator 

Table 5.1: Classification of complexity for fragments of J^XVC-MC 
All results are completeness results except for the P cases which are upper bounds. 



Note that some cases are missing in Table |5.1[ e. g. the one where only 
conjunction is forbidden, the one where only both disjunctions are forbidden 
and the one from Theorem 5.7 but with classical disjunction forbidden instead 
of dependence atoms. Also, the expressiveness and the satisfiability problem 
of MIVC need to be studied. 



Chapter 6 



Two-variable Dependence 
Logic 



In this chapter we will assttme that all first-order vocabularies are purely rela- 
tional, i. e. they do not contain function or constant symbols. And w. 1. o. g. we 
assume that all relation symbols are at most binary. 



6.1 Comparison of XT^ and TP- 

In this section we show that 



using results from Sections 6.2 and 6.3 in advance. We also further discuss the 



expressive powers and other logical properties of 2?^ and IJ-'^. 

Lemma 6.1. For any formula <p eV^ there is a formula ^* e IJ^^ such that for all 
structures 21 and teams X, where dom(X) = {x,y}, it holds that 

2lhx<?' iff Sthx^- 



Proof. The translation (p ^ (p* \s defined as follows. For first-order liter- 
als the translation is the identity, and negations of dependence atoms are 
translated by -^x = x. The remaining cases are defined as follows: 

= {x) ^ 3y/{x,y}{x = y) 
= {x,y) ^ 3x/{y}{x = y) 

(p A ^ (p* A. Xp* 

(p V \p 1-^ (p* V xp* 

3x(p ^ 3x(p* 
yxcp ^ yx(p* 
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The claim of the lemma can now be proved using induction on (p. The only 
non-trivial cases are the dependence atoms. We consider the case where (p is 
of the form = (x, y ) . 

Let us assume that 21 |=x i^'- Then there is a function F: A ^ A such that 

for all s e X : s{y) = F(s(x)). (6.1) 

Define now F' : X ^ A as follows: 

F'(s) := F(s(x)). (6.2) 

F' is {yj-independent since, if s(x) = s'(x), then 

F'(s) = F(s(x))=F(s'(x)) = F'(s'). 

It remains to show that 

21 \=x{F'/x) ix = y)- (6.3) 

Lets e X(F7x). Then 

s = s'(F'(s')/x) for some s' e X. (6.4) 

Now 

s( 

Therefore, Eq. < |6.3| holds, and hence also 

21 hx 3x/{y}(x = y). 

Suppose then that 21 'P- Then there must be s, s' e X such that s{x) = 
s'(x) and s(y) 7^ s'(y). We claim now that 

21 3x/{y}(x = y). (6.5) 

Let F: X A be an arbitrary {y}-rndependent fimction. Then, by {y}- 
independence, F(s) = F(s') and since additionally s(y) 7^ s'(y), we have 

s(F(s)/x)(x) = F(s) 7^ s(y) = s(F(s)/x)(y) 

or 

s'(F(s')/x)(x) = F(s') ^ s'(y) = s'(F(s')/x)(y). 
This implies that 

21 ^x(f/.t) = y)' 

since s(F(s)/x), s'(F(s')/x) e X(F/x). 

Since F was arbitrary, we may conclude that Eq. | |6.5| holds. ■ 



,(,)eFV)'^F(s'(x))es'(y)es(y). 



6.1 Comparison of TT^ and iP- 
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Next we show a translation from XT^ to T)^. 

Lemma 6.2. For any formula (p e XT^ there is a formula c[)* e such that for all 
structures 21 and teams X, where dom(X) = {x,y}, it holds that 

%^x'P iff 21 Hx^- 



Proof. The claim follows by the following translation (p ^ (p*: For atomic 
and negated atomic formulas the translation is the identity, and for propo- 
sitional cormectives and first-order quantifiers it is defined in the obvious 
inductive way. The only non-trivial cases are the slashed quantifiers: 

^x/{y}\p ^ 3z(x = z A 3x(=(z, x) A i/;*)), 
3x/{x}!/7 1-^ 3x(=(i/, x) A ip*), 
3x/{x,y}xp ^ 3x(=(x) A !/;*). 

Again, the claim can be proved using induction on <p. We consider the 
case where cp is of the form 3x/{y}ip. Assume 21 |=x (p- Then there is a 
{j/j-independent function F: X ^ A such that 

21 hx(F/.) ^- (6.6) 

By {y} -independence, s(x) = s'(x) implies that F(s) = f (s') for all s, s' e X. 
Our goal is to show that 

21^x3z(x = za3x(=(z,x) A!/^*)). (6.7) 



Now, Eq. ^Jj holds if for G : X ^ A defined by G(s) = s(x) for all s e X it 
holds that 

2lhx(G/z)3x(=(z,x)A!/^*). (6.8) 
Define F' : X(G/z) ^ A by F'(s) = F(s \ {x,y}). Now we claim that 

21 \=X{G/z){F'/x) =(Z,X) A I/^*, 



implying Eq. | |6.8| and hence Eq. 1 6.7 1. 
First we show that 

21 hx(G/z)(f'/x) =(Z'^)- (6-9) 

At this point it is helpful to note that every s e X(G/z)(F'/x) arises from an 
s' e X by first copying the value of x to z and then replacing the value of x by 
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F(s \ {x,y}), i.e. that 3(2) = s'(G(s')/z)(z) = G(sO = s'{x) and s(x) = f (s'). 
Now, to show Eq. ^3^, let si,S2 g X{G/z){F'/x) with si(z) = 82(2) and let 
s[,S2 e X as above, i. e. si (resp. S2) arises from s[ (resp. s'j). Then it follows 
that s[{x) = S2(x). Hence, by {yj-rndependence, F{s '^ ) = F^s!^), implying that 
Si(x) = F(sj) = F(s2) = S2(x) which proves Eq. 16.9 1. Let us then show that 



21 hx(G/z)(F'/x) V*- (6.10) 

Note first that by the definition of the mapping (p ^ <p* the variable z cannot 
appear free in By Proposition |3.7[ the satisfaction of any T> formula d only 
depends on those variables in a team that appear free in 6, therefore Eq. ( 6.10| 
holds iff 

21 l=X(G/z)(F'/i)r{x,y} '/'*■ (6-11) 

We have chosen G and F' in such a way that 

X{G/z){F'/x) \ {x,y} = X{F/x), 



hence Eq. I 6.II) now follows from Eq. ( |6.6) and the induction h5^othesis. 
We omit the proof of the converse implication which is analogous. 



For sentences. Lemmas 6.1 and 6.2 now imply the following. 
Theorem 6.3. ^ jjr2 ^ -p3 



Proof. The claim follows by Lemmas 6.1 and 6.2 First of all, if is a sentence 
of TJ- or T>, then, by Proposition 3.7 for every model 21 and team X 7^ 



2lhx'|'iff2lh{0} 



(6.12) 



It is important to note that, even if e is a sentence, it may happen that <p* 
has free variables since variables in W are regarded as free in subformulas of 
(p* of the form Bx/Wi/^. However, this is not a problem. Let Y be the set of all 
assigments of 21 with the domain {x,y}. Now 

2th{0}'? iff '^H'P 

iff 21 Hy VxVy^ 

iff 21 Hy VxVy^* 

iff 21 h{0} ^x\ly(p*, 

where the first and the last equivalence hold by Eq. ( |6.12^ , the second by 
the semantics of the universal quantifier and the third by Lemma 6.1 An 
analogous argument can be used to show that for every sentence (p e XT^ 
there is an equivalent sentence of the logic T>^ . ■ 



6.1 Comparison of TT^ and iP- 
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6.1.1 Examples of properties definable in TP- 

We now give so me ex amples of definable classes of structures in T)^ (and in 
XT^ by Theorem 6.3 1. 

Proposition 6.4. The following properties can he expressed in V^. 

a) For unary relation symbols P and Q, T>^ can express \P\ ^ |Q|. This shows 

b) If the vocabulary of% contains a constant c, then T>^ can express that A is 
infinite. 

c) \A\ can be expressed already in V^. 

Proof. Let us first consider part|aj. Define (p by 

^:=Vx3y(=(y,x) a(^P(x) vQ(y))). 

Now, 2t 1= iff there is an injective function F: A ^ A with F[P^] c 
iff \P^\ < IQ'^I. 
For part|bj, we use the same idea as above. Define ip by 

:= Vx3y(=(y,x) a -c = y). 

Now, 21 1= !/» iff there is an injective function F: A ^ A with ^ F[A] 
iff A is infinite. 

Finally, we show how to express the property from part|cj. Define 6 as 

VX( V Xr), 

where Xi is =(^)- It is now immediate that 21 |= iff |A| ^ fc. ■ 

It is interesting to note that part|a]| implies that T>^ does not have a zero-one 
law, since the property |P| |Q| has the limit probability j. 

Proposition 6.5. < XT'^. This holds already in the finite. 



Proof. Almost all XJ-^ formulas used in Section 6.2 to prove the undecid- 
ability of the (finite) satisfiability problem of XJ-'^ are in fact J-O'^ formulas. 
The only exception is the formula (ppj^ (which is part of the formula (/'grid/ 
cf. Definition 6.14 >. Therefore, if (ppm could be expressed in T>-^ then (finite) 



satisfiability would be as un decidable for T?^ as it is for XJ-^. But this is a con- 
6.25 and, hence, the XJ^^ formula i^join is not definable 



tradiction to Theorem 
inl?2. 
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6.2 Satisfiability is undecidable for XT^ 

In this section we will use tiling problems, introduced by Wang IIWan61l , to 
show the undecidability of XJ^^-Sat as well as IJ^^-FinSat. 

Here, a V^ang tile is a square in which each edge (top, right, bottom, left) is 
assigned a color We say that a set of tiles can tile the N x N plane if a tile can 
be placed on each point (i,]) e IN x N such that the right color of the tile in 
(},]) is the same as the left color of the tile in (i + 1,;) and the top color of the 
tile in (i,f) is the same as the bottom color of the tile in (i,] +1). Notice that 
turning and flipping tiles is not allowed. 

We then define some specific structures needed later. 

Definition 6.6. Let m, n e N u{X'}. Then the model ©mxn := (G, V, H) where 

• G= {0,...,m} X {0,...,n}, 

• H = {i + 1,;)) e G X G I f < m,] ^ n} and 

• V = {((f,;), + 1)) e G X G I f m,] < n) 

is called the {m x n)-grid. Instead of 6coxco we sometimes just write (S and 
call it the infinite grid. The set {©mxn \ m,n e N} of all finite grids is denoted 
by FrnGrid. ^ 

Definition 6.7. A set of colors C is defined to be an arbitrary finite set. The 
set of all (Wang) tiles over C is C^, i. e. a tile is an ordered list of four colors, 
interpreted as the colors of the four edges of the tile in the order top, right, 
bottom and left. A tile t = (cq, Ci, C2, C3) will usually be written in the form 

Co 

C3 Ci . 

And we will often refer to its single colors as ftop, iright' ^bottom arid tigft. 

Let C be a set of colors, T c a finite set of tiles and 21 = (A, V, H) a 
first-order structure with binary relations V and H interpreted as vertical and 
horizontal successor relations. Then a T-tiling of 21 is a total function t: A ^ T 
such that for all x,y e Ait holds that 

a) i(x)top = i(i/)bottom if (^/J/) E ^/ i-e. the top color of x matches the 
bottom color of y, and 

b) f(x)].ight = t{y)left if i^'V) £ i. e. the right color of x matches the left 
color of y. 
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A periodic T-tiling of 21 (with period m x n) is a T-tiling t of 21 such that there 
are m,n^l with 

f(^)left = f(y)left for aU x,y e A with {x,y) e H*" 

and 

f(^)bottom = f(y)bottom for aU x,y e A with {x,y) e V", 

i. e. there is a rectangle of tiles of size m x n which can be concatenated arbi- 
trarily often in both directions (if V and H are total relations in 21). 

Now additionally let c e C be a color. Then a (bordered) (T, c)-tiling of 2t is a 
T-tiling t of 21 such that for all e A it holds that 

^(^)ieft = c if there is no y e A with (y, x) e H, 

t(x)l,ottom = if there is no y e A with (y, x) e V, 

t(x)j.ight = c if there is no y e A with (x, y) e H and 

f (^)top = c if there is no y e A with (x, y) e V, 

i. e. the borders of 2t (so far as they exist) are aU c-colored. ^ 
Next we define tiling problems for classes of structures. 

Definition 6.8. A structure 21 = (A, V, H) is called (periodically) T-tilable 
(resp. (T, c)-tilable) iff there is a (periodic) T-tiling (resp. bordered (T, c)-tiling) 
of 21. 

For any class C of structures over the vocabulary {V,H] we define the 
problems 

TlLlNG(C) := {T I there is an 21 e C such that 21 is T-tilable}, 



PeriodicTiling(C) := {T I there is an 21 e C such that 

21 is periodically T-tilable} 

and 

BorderedTiling(C) := {(T, c) | there is an 21 e C such that 

21 is (T,c)-tilable}. 

We usually write TlLlNG(2l) instead of TlLlNG({2l}) - and analogous for 
the other two problems. ^ 
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Later we will use the following theorems to show the imdecidability of 
J J'^-Sat and X J'^-FinSat. 

Theorem 6.9 ( l|Ber66l , |Har86l ). TlLlNG(©) is n\-complete. 
Theorem 6.10 (| GK72| ). PeriodicTiling(0) is i:\-complete. 

Theorem 6.11. BORDEREDTlLlNG(FinGrid) is H^-complete^ 

Proof of ThE0REM |6.11I For the upper bound note that all possible solu- 
tions are finite and can be recursively enumerated and checked. 

For the lower boimd we give a reduction from PeriodicTiling(25). For 
this purpose let C be a set of colors and let T be an arbitrary set of tiles over C. 
Then we define a new set of colors C := (C x C) u EB} where □ and 

EE are new colors not included in C. And we define a new set of tiles 



T' 



□ 



□ 



□ 



□ , □ 



□ 



corner tiles 



u < 



edge tiles 

(itop/C) 
{heft, d) (fright/ d) 

(f bottom/ ^) 

inner tiles 



(c,c) 

■ 


(c,c) 

□ □ , 
■ 


□ 

■ (c,c) , 


□ 

■ (c, c) 

□ 


■ 

□ □ 

(c,c) 


□ 

(c, c) ■ 

□ 


c e C 



t e T, c,d e C 



We will now prove that there is a periodic T-tiling of the infinite grid iff there 
is a bordered (T', ■)-tiling of a finite grid. Thus, the construction of T' from T 
is a reduction from PeriodicTiling(0) to BORDEREDTlLING(FinGrid) and 
therefore, by Theorem 6.10 BORDEREDTlLlNG(FinGrid) is Sj-hard. 



^In fvEB961 a very similar problem is proven to be Zj-hard. Their technique, however, is 
completely different from ours. 
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Now, first let there be a periodic T-tiling of 25 with period m x n which is 
composed of repetitions of the rectangle 



a 
s t 
r 




e 

t V 

u 




h 

X s 
w 








m 
k I 
d 




I n 
g 




1 

p k 

i 










d 
b c 
a 




§ 
c f 
e 




i 

i b , 
h 



with a,b,c,...e C. 
Then the following is a bordered (T', ■)-tiling of ©(^+2) x (n+2)- 



■ 




■ 




■ 




■ 




■ 


■ □ 




□ □ 




□ □ 




□ □ 




□ ■ 


□ 




{a, a) 




ice) 




(hjt) 




□ 



□ 



(s,s) 



□ 



{a, a) 
(s,s) {t,s) 
{r,a) 



(e,e) 
{t,s) {v,s) 
{u,e) 



{h,h) 


□ 


(x,s) (s,s) 


(s,s) ■ 


{'w,h) 


□ 



□ 

■ {k,k) 

□ 


(m,fl) 

ik,k) ilk) 
{d,a) 


(o,e) 

ihk) {n,k) 


□ 

■ {b,b) 

ffl 


{d,a) 
(b, b) (c, b) 
{a, a) 


icb) {f,b) 
{e,e) 



{p,k) {k,k) 
HM 


□ 

□ 


ij,h) 
{i,b) {b,b) 
ih,h) 


□ 

{b,b) ■ 

□ 



E 




{a, a) 








{h,h) 




□ 


■ m 




ffl □ 




□ □ 




□ □ 




□ ■ 


■ 




■ 




■ 




■ 




■ 



For the reverse direction let there be a bordered (T', ■)-tiling of ©mxn- 
Because the corner and edge tiles of T' are the only tiles with the color ■ the 
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tiling is of the form 



■ 




■ 




■ 


■ □ 




□ □ 




□ ■ 


□ 




if J) 




□ 



□ 



{b,b) 



ffl 



{b,b) [c,h) 
{a, a) 



□ 



{e,e) 



□ 



ffi 




{a, a) 




□ 


■ m 




m □ 




□ ■ 


■ 




■ 




■ 



with a,b,c e C. Since the bottom left corner tile uses the color EB instead of □ 
we know that m,n ^ 3, i. e. there is at least one inner tile in the tiling. And due 
to the definition of the first components of the colors of the inner tiles of T' it 
follows that the first components in the inner tiles in the above tiling form a 
partial T-tiling of & with size (m — 2) x (n — 2). Now, because of the definition 
of the second components in the inner tiles of T' it follows that a = f, b = e 
etc., i. e. the partial T-tiling is the defining rectangle of a periodic T-tiling of © 
which therefore exists. ■ 



To prove the undecidability of J J'^-Sat (TheoremteT9} and J J'^-FinSat 
(Theorem 6.23| we will, for every set of tiles T, define a formula (pj such that 
21 has a T-tiling iff there is an expansion 21* of 21 with 21* |= (pj- Then we 
will define another formula (/'grid and show that 21 |= (/'grid iff 21 contains a 
substructure isomorphic to a grid. Therefore (pj a (/Jgrid is satisfiable if and 
only if there is a T-tiling of a grid. For IJ-^-Sat we will addit ionally ensure 
that this grid is the infinite grid and for IJ-'^-FinSat (Section 6.2.1 > we will 
extend cpj by a formula (p^j ensuring that 21* has a bordered (T, c) -tiling. 



Definition 6.12. Let T = {t°, . . . , t*^} be a set of tiles and for all i «: k let 
right(t') (resp. top(t')) be the set 



f''} I fright = ift (resp. = t 



J 

^bottom 



i. e. the set of tiles matching t' to the right (resp. top). 
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Then we define the first-order formulas 



V^T := VxVy('(H(x,y) - A (^'.W - V ■P;(y))) a 

i^fc tieright(t') 

(y(x,y)-> A(J',W- V -PAy)))). 

:= Vx V A A -^'P]W>) and 

(pj := i/'j A 07 



over the vocabulary V , H, Pq/ ■ ■ ■ / f'lt- Here, ^ ^ is an abbreviation of v 



Note that our semantics for the implication operator leads to the same 
semantics as the usual first-order definition of (p ^ xp being an abbreviation 
for ^(p V xp because in the first-order case p'^ is nothing else than the negation 
normal form of ^p (cf. Definition |Z9}. However, our definition uses negation 
only directly in front of atomic formulas and is thus compatible with our 



definitions of formulas to always be in negation normal form (cf. Sections 2.1 
and 1311. 



With the previously defined formulas we can now express the T-tilability 
of a given structure. 



Lemma 6.13. Let T = {to, ■ ■ - Jk} ^ of tiles and 21 = {A, V, H) a structure. 
Then 21 is T-tilable ijf there is an expansion 21* = {A, V, H,Pq,..., Pj-) of 21 such 
that 21* \= pT- 



Notice that pj is an J^C^-sentence. Therefore T-tiling is expressible even in 
J-O^. The difficulty lies in expressing that a structure is (or at least contains) a 
grid. This is the part of the construction where J^O'^ or even formulas are 
no longer sufficient and the full expressivity of IJ-'^ is needed. 
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Definition 6.14. A structure 21 = (A, V , H) is called grid-like iff it satisfies the 
conjimction (pgrid of the formulas 

^SWroot := 3x(^Vi/(-y(i/,x) A -H(i/,x))), 

Afunctional ■= ^x\ly{R{x,y) 3x/{y}y = x) 

for Re {V,H}, 
Ainjective := VxVi/(R(j,i/) ^ 3y/{x} x = y) 

iorRe{V,H}, 
tetinct := VxVy-(y(3C,i/) A H(x,y)), 

'/'swedges := Vx((Vy^R(y,x)) ^ Vy((R'(x,y) v R'{y,x)) - V^^K(^,y))) 

for (R,K')6 {Cl^.H),(H,y)}, 
•^'NEedges := Vx ((Vy y)) ^ Vy y) v R'(y, x)) ^ Vx -R(y, x))) 

for 

<^)join := Vx((3yy(x,y) a 3yH(x,y)) - Vy((y(x,y) v H(x,y)) 
-3x/{y} (y(y,x)vH(y,x)))). 



The grid-likeness of a structure can alternatively be described in the follow- 
ing more intuitive way. 

Remark 6.15. A structure 2t = (A, V, H) is grid-like iff 

a) V and H are (graphs of) injective partial functions, i. e. the in- and out-degree 
of every element is at most one (^functional "/'injective-*/ 

h) there exists a point S W that does not have any predecessors ((pswrooOf 

c) for every element its V-successor is distinct from its H-successor (^distinct'*' 

d) for every element x such that x does not have a V- (resp. H-) predecessor, the 
H- (resp. V-) successor and -predecessor ofx also do not have a V- (resp. H-) 

predecessor ((pswedges)' 

e) for every element x such that x does not have a V- (resp. H-) successor, the 
H- (resp. V-) successor and -predecessor ofx also do not have a V- (resp. H-) 

successor C^Eedges)/ 

f) for every element x that has a V-successor and an H-successor there is an 
element y such that (x,y) e (VoH) n (HoV) or{x,y) e (V oV) n (HoH). 



6.2 Satisfiability is undecidable for TT^ 



101 



Proof. The only difficulty is the connection between property|f]l and formula 
'/'join- First note that ^join is equivalent to the first-order formula 



Vx(^(3zy(x,z) A 3zH(x,z)) ^ 

3x'Vy((y(x,y) v H(x,y)) ^ (y(y,x') v H(y,x') 

Since (/'functional ^^id ^distinct hold as Well, this implies 



Vx^(3zy(x,z) A 3zH(x,z)) 3x'3yi3y2yyi i^yi ^ V{x,yi) a H(x,i/2) 
A (y(yi,x') V H(yi,x')) a (y(y2,x') v H(y2,x') 



Due to ^injective neither V{yi,x') a y(y2, x') nor H(yi,x') a H(y2, x') can be 
true if yi 7^ y2. Hence, from the above it follows that 

Vx^(3zy(x,z) A 3zH(x,z)) 3x'3yi3y2^yi 7^ y2 

A (^(y(x,yi) A H(x,y2) a V(yi,x') a H(y2,x')) 

V (V(x,yi) A H(x,y2) a H(yi,x') a y(y2,x'))))). 

From this formula the property |f| is immediate (with x := x and y := x'). The 
reverse direction can be shown similarly but it will not be needed anjway. ■ 



Now we will use Remark 6.15 to show that a grid-like structure, although 
it does not need to be a grid itself, must at least contain a component that 
is isomorphic to a grid. Here, by component we mean a maximal weakly 
connected substructure, i. e. *B is a component of 21 = {A, V , H) iff *B is an 
induced substructure of 21 such that between any two elements from B there is 
a path along R := V u H u u H^^ and B is closed under following edges 
from R. 

Theorem 6.16. Let 21 = (A, V, H) be a grid-like structure. Then 21 contains a 
component that is isomorphic to a grid. 

Proof. Due to ^swroot there exists a point SW e A that has a V- and an 
H-successor but no V- or H-predecessor. Now let n be the smallest natural 
number such that for all x e A it holds that {SW, x) ^ V"^^. If such a number 
does not exist let n := 00. Since, by Remark 6.1^^ V is an rnjective partial 
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function and SW does not have a V-predecessor the latter case can only occur 
if A is infinite. Analogously define m e N u{cx)} as the smallest number such 
that for all X e A it holds that (S W, x) i H"+i or as oo. 

We will show that 21 has a component that is isomorphic to &mxn- For this 
purpose we first prove by induction on 1 A: n that 21 has an in-degree 
complete substructure isomorphic to &mxn - with (0,0) mapped to SW. Here, 
we call a substructure of 21 in-degree complete if every point in S) has the same 
rn-degrees in Jo as it has in 21. 

By selection of m the point SW has an H' -successor m, for each < z < m 
(whenever we write i ^ m we naturally mean that the case / = m is only 
included if m < cx)). Since H is an injective partial function and SW has no H- 
predecessor the points are all distinct and imique. Due to i^swedges none of 
the points m; has a V-predecessor and therefore the V-successors of the points 
M, are not in the set {m, | i ^ m}. Therefore 21 \ {ui \ i ^m} is isomorphic to 
®mxi- Due to (/'swedges/ ^SWroot and ^injective the structure 2t \ {Ui \i Sim} is 
rn-degree complete. 

For the induction step assume that there is an in-degree complete substruc- 
ture 58 of 21 which is isomorphic to &mxk for ak < n such that (0, 0) is mapped 
to SW. Let h be the isomorphism from &mxk to *B. We will now extend h 
to h' such that h' is an isomorphism from ©„,x(i:+i) to a substructure of 2t. 
Since k + 1 ^ n there exists a point uq e A such that uq is the V-successor of 
h{{0,k)). Due to i^NEedges and since h{{0,k)) has a V-successor, each of the 
points h{{i,k)), i m, has a V-successor Since V is a partial injective func- 
tion and the points h{{i,k)) are all distinct, the points fl; are also all distinct. 
And since the structure *8 is in-degree complete, none of the points fl, nor any 
of their {V u H)-successors is in B. 

Next, we will show that Uj^i is the H-successor of a, for all i < m. For 
i ^ m — 2, the point h{{i,k)) has an H^- but no V^-successor in *B. Hence, for 
all f ^ ffi — 2, if the V^-successor of h{{i,k)) exists in 21, it cannot be the same 
as the H^-successor of h{{i,k)). Also notice that each of the points h{{i,k)), 
i ^ m — 2, has a V- and an H-successor in 2(. Therefore due to Remark [6. 1 | the 
{V o H)-successor and the (H o y)-successor of the point h{{i,k)), i ^ m — 2, 
are the same. Therefore the H-successor of fl; is for all f < ;« — 2. 

In the case m < oo it still needs to be shown that a,,, is the H-successor of 
Um-i- For this purpose note that the point h{{m — l,k)) has no H^ -successor 
in 2t since h{{m,k)) does not have an H-successor (due to </'NEedges and the 
selection of m). Hence, there cannot be a point a in 2t such th at it is both an 



H-^- and a V'^-successor of ^((ffx — 1,A:)). Now due to Remark 6. IE ' and the 



fact that h{{m —l,k)) has a V- and an H-successor in 21, the (H o V)- and the 
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(y o H)-successor of h{{m — l,k)) have to be the same. Therefore a„, is the 
H-successor of flm-i- 

We define h' := h u {{i,k + 1) i-^ a,- | i m}. Each point (with the 
exception of uq which has no H-predecessor at all due to '^'swedges) has as 
H-predecessor. Hence, due to the in-degree completeness of *B, injectivity of 
V and H and since each of the points fl, has a V-predecessor in B, we conclude 
that the structure 21 \ range{h') is an in-degree complete substructure of 21. 
We also notice that due to injectivity, the points fl, have no reflexive loops. 
Due to the in-degree completeness of *B none of the {V u H)-successors of the 
points fl,, i < m, are in B. Hence it is straightforward to observe that h' is the 
desired isomorphism from ©,„x()c+i) to an in-degree complete substructure of 
21. 

We have now proven that 21 has an in-degree complete substructure *B such 
that there is an isomorphism h from ©mxn to S with h{{0,0)) = SW. Un < co 
then, by definition of n, the point h{{0,n)) has no V-successor. Therefore due 
to ^NEedges none of the points h{{i,n)), i ^ m, has a V-successor in 2t. If on 
the other hand n = oo then, again by definition of n and ^NEedges/ each of the 
infinite many points h{{i,j)), i ^ m, j e N, has a V-successor in *8. These facts 
together with functionality and injectivity of V and the in-degree completenes 
of S implies that in both cases *8 is closed under V and V , i. e. 

B'u {b \ there is e B with {a, b) e V or {b, a) e V} = A. 

Analogously it can be shown that *S is also closed under H and H^^. Hence, 
5B is in fact a component of 21. ■ 

Now we will use the previous result to define a formula that ensures con- 
tainment of the infinite grid. 

Corollary 6.17. Let 2t = (A, V, H) be a structure that satisfies the conjunction 
'/'mfgrid "/^grid ^"'^ the formulas 

teteW := Vx3yi^(x,y) forRe{V,H}. 

Then 2t contains a component that is isomorphic to the infinite grid 0. 



Proof. By Theorem [6.16 we know that 21 contains a component *B that is 



isomorphic to &mxn for some m,n e'N u{co}. Now suppose that m < co and 
let h be the isomorphism from 0mxn to *B. Then h{{m,0)) cannot have an 
H-successor in 21 since *8 is a component in 21 (and as such is closed imder H), 
*8 is isomorphic to ©mxn and {m,0) does not have an H-successor in &mxn- 
But this is a contradiction to <pmimite{^) and therefore m = co. For analogous 
reasons it follows that n = oo and, hence, *B is isomorphic to © . ■ 
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The last tool needed to prove the main theorem is the following lemma 
about tilability of components. 

Lemma 6.18. Let C be a set of colors, T a set of tiles over C, c e C a color and 
03 = {B,V,H) a structure. Then 03 is T-tilable (resp. {T , c)-tilahle) iff there is a 
structure 2t which is T-tilable (resp. (T, c)-tilable) and contains a component that is 
isomorphic to 



Proof. The direction from left to right is trivial since every structure has 
itself as a component. For the reverse direction the T-tilability of 03 is also 
obvious since the matching of neighboring colors is clearly preserved under 
taking arbitrary substructures. 

For the property of (T, c)-tilability on the other hand it is necessary that S 
is in fact isomorphic to a component and not only to any substructure of 21: If t 
is a (T, c)-tiling of 2t and *8 is isomorphic to a component of 21 then assume 
there is a x e B such that, for example, x does not have a H-predecessor in 03 
but also t(x)igft 7^ c. From this follows that x does not have a H-predecessor in 
21 since 03 is isomorphic to a component of 21, i. e. a maximal weakly connected 
substructure. But this is a contradiction to t being a (T, c)-tiling of 2t. ■ 



The following is the main theorem of this section. 
Theorem 6.19. JJ'^-Sat is Il\-complete. 



Proof. For the upper bound note that J^O-Sat e Il\ by Godel's complete 
ness theorem. By Remark |2.19|it follows that ESO-Sat e 



n? and by the 



computable translation from V to SSO from |,Vaa0 7, Theorem 6.2] it follows 



that D^-Sat e n' 



and Theorem 



6.3 



Finally, the computability of the reductions in Lemma 
implies that IJ'^-Sat e nj. 



6.2 



The lower bound follows by Theorem 6.9 and the reduction g from 
Tiling(©) to IT^-Sai defined by g{T) := (^mfgrid ^pT- To see that g in- 
deed is such a reduction, first let T be a set of tiles such that C5 is T-tilable. 
Then, by Lemma 6.13} it follows that there is an expansion (S* of such that 
©* \= (pT- Clearly ©* \= (/^mfgrid and therefore 0* h <?'infgrid a (pr- 

If, on the other hand, 21* is a structure such that 21* |= ^infgrid ^ ipT, then, 
by Corollary 6.17 the {V, H}-reduct 2t of 21* contains a component that is 
isomorphic to &. Furthermore, by Lemma 6.13 2t is T-tilable. Hence, by 
Lemma [6T8l © is T-tilable. ■ 
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6.2.1 Finite satisfiability is undecidable for XT^ 

We will now discuss the problem XJ-"^-FinSat whose undecidability proof is 
similar to the above. The main difference is that we will now use bordered 
instead of arbitrary tilings. 

Therefore we first need to be able to express the containment of a finite grid. 



Corollary 6.20. Let 21 = (A, Y , H) be a finite grid-like structure. Then 21 contains 
a component that is isomorphic to a grid (&mxnfor some m,n e'N. 



Proof. By Theorem 6.16 there is a component *8 of 21 that is isomorphic to a 
grid ©mxi! for some m, nelNujcx)}. Thus we only have to show that m,n < go. 
Now suppose that = oo and let h be the isomorphism from ©ccxn to *B. 
Then h{{0,0)),h{{l,0)),h{{2,0)), ... is an infinite sequence of pairwise-distinct 
points since h{{0,0)) does not have an H-predecessor and H is injective. But 
this is a contradiction to the finiteness of 21. For analogous reasons it holds 
that m < CO. m 



Next we define some formulas dealing with border colors. 

Definition 6.21. Let C be a set of colors, T = {i*^, . . . , t*^} a set of tiles over C 
and c 6 C a color. Furthermore let 



t' f,: 



dir 



for dir e {top, right, bottom, left}, i. e. the set of tiles with c-colored dir edge. 
Then (pi-j is defined as the conjunction of the J-O^ formulas 



'/'c,T,bottom 


:= Vx| 


'(Vy^y(y,x))- 


^' ^ '^c,bottom 


(pc,T,\eft 


:= Vx| 


'(Vy^H(y,x)) - 


- , V -p.w). 


^c,T, top 


:= Vx| 


'(Vy^y(x,y)) - 




'/'c,T,right 


:= Vx| 


'(Vy^H(x,y)) - 


- , V Pii^))- 

''sTl- right 



The following obvious extension of Lemma 6.13 now shows how to express 
(T,c)-tilability 
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Lemma 6.22. Let C be a set of colors, T = {to, ... ,ti^} a set of tiles over C, c e C 
and 21 = {A, V, H) a structure. Then 21 is (T, c)-tilable iff there is an expansion 
21* = {A, V, H,Po,..., Pjt) o/2t such that 21* h a cpcj. 



Finally, the following theorem is the finite analogon of Theorem 6.19 



Theorem 6.23. JJ'^-FinSat is iP^-complete. 

Proof. For the upper bound note that since all finite structures can be re- 
cursively enumerated and the model checking problem of IJ-^ over finite 
models is clearly decidable we have XJ^^-FinSat e S^. 

The lower bound now follows by Theorem 6.11| and the reduction g from 
BORDEREDTlLING(FinGrid) to our problem defined by 

g{{T,c)) := ^grid A(pT A (pcj. 

To see that g indeed is such a reduction, first let C be a set of colors, T a set 
of tiles over C, c e C a color and )«, n e N such that there is a bordered (T, c)- 
tiling of &mxn- Then, by Lemma 6.22 it follows that there is an expansion 

Clearly, ©* 



of (5„ 



mxn ^mxn 

therefore © 



such that 051 



(pT A cpcj. Clearly, ©* ^„ ^ '?'grid and 

„ h ^grid A A 4>c,T. 

If, on the other hand, 2t* is a finite structure such that 2t* |= ^gnd a ^7 a <pcj 
then, by Corollary 6.20 the {V, H}-reduct 21 of 21* contains a component that 
is isomorphic to &mxn for some m,n e N. Furthermore, by Lemma 6.22 21 is 
(T, c)-tilable. Hence, by Lemma 6.18 0mx« is (T,c)-tilable. ■ 



6.3 Satisfiability is NEXPTIME-complete for 

In this section we show that D^.sat and D^.piNSAT are NEXP-complete. Our 
proof uses the fact that TOC^-Sai and J'CC^-FinSat are NEXP-complete 
EH05J. 

Theorem 6.24. Let xbea relational vocabulary. For every formula <p e C^[t] there 
is a sentence cp* e £SO[t u {R}] (with arity(R) = |Fr(<^)|j, 

cp* ■.= 3Ri...3Rkip, 

where Rj is ofarity at most 2 and ip e TOC^, such that for all 21 and teams X with 
dom(X) = ¥r{(p) it holds that 

2thx</' iff (2t,rel(X)) (6.13) 



6.3 Satisfiability is NEXPTIME-complete for 
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ivhere (2l,rel(X)) is the expansion 21' o/2l into vocabulary t u {R} defined by 
:= rel(X). 

Proof. Using induction on </) w e will first translate ^ into a sentence ^ e 
f iSO[t u {R}] satisfying Eq. 16.13 >. Then we note that (p can be translated into 
an equivalent sentence cp* that also satisfies the syntactic requirement of the 
theorem. The proof is a modification of the proof from l Vaa071 Theorem 6.2]. 
Below we write <p{x,y) to indicate that Fr(^) = {x,y}. Also, the quantified 
relations S and T below are assumed not to appear in ip and 6. 

a) Let (p{x,y) e {x = y,^x = y,P{x,y), ^P{x,y)}. Then ^ is defined as 

VxVy(K(x,y) ^ (p{x,y)). 

b) Let (p{x,y) be of the form = {x,y). Then ^ is defined as 

Vx3^ii/R(x,i/). 

c) Let (p{x, y) be of the form -^ = {x, y). Then (p is defined as 

VxVi/-_R(x,i/). 

d) Let (^(x, y) be of the form ^{x, y) v 0{y). Then ^ is defined as 

3S3T()/5(S/K) A e{T/R) a VxVy(R(x,y) ^ (S(x,y) v T(y)))). 

e) Let (^(x) be of the form ^{x) v 6. Then ^ is defined as 

3S3T(!^(S/_R) A 0(T/_R) a Vx(R(x) ^ (S(x) v T))). 

f) Let (p{x,y) be of the form !/7(x) a 0{y). Then ^ is defined as 

3S3r(^(S/K) A 0(T/R) A VxVy(K(x,y) ^ (S(x) a T(y)))). 

g) Let (p{x) be of the form 3yip{x, y). Then ^ is defined as 

3S(^(S/K) A Vx3y(K(x) ^ S(x,y))). 

h) Let (p{x) be of the form \/yip{x,y). Then ^ is defined as 

3S(^(S/_R) A VxVy(K(x) ^ S(x,y))). 
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Note that we have not displayed all the possible cases, e. g. (p of the form 
= (x) or P{x), for which (p is defined analogously to the above. Note also that, 
for convenience, we allow 0-ary relations in the translation. The possible 
interpretations of a 0-ary relation _R are and {0}. For a 0-ary R we define 
21 1= R if and only if = {0}. Clause[e| exemplifies the use of 0-ary relations 
in the translation. It is easy to see that (p ui|e]l is equivalent to 

3S{e{J/R) V {ip{S/R) A \fx{R{x) S(x)))). 

Generally, the use of 0-ary relations in the translation can be easily eliminated 
with no essential change. 

A straightforward induction on (p shows that (p can be transformed into ip* 
of the form 

3Ri... 3Rk(yxyyxp a /\Vx3i/0/ a /\ Vx3'^^i/Km.(x,i/)), 

where and 0, are quantifier-free. ■ 
Note that if ^ e is a sentence then the relation sym bol R is 0-ary and 



rel(X) (and R^) is either or {0}. Hence, Theorem 6.24 implies that for an 
arbitrary sentence (p e X'^[t] there is a sentence cp' := (p* (T/R) e fiS(9[T] such 
that for all 21 it holds that 

2th'/' iff 2lh{0}'/' 

iff (2t,{0})hr (6.14) 
iff 21 h^'- 

Note that if ^ e does not contain any dependence atoms, i.e. cp e J-O^, 
then the sentence (p* is of the form 

3Ri... 3Kfc(VxVi/!/^ A /\ \lx3y6i) 

i 

and the first-o rder part of this is in Scott normal form (cf. IISco62l ). So, in 



Theorem 6.24 we essentially translate formulas of T)^ into Scott normal form. 



Theorem 6.24 now implies the main theorem of this section. 
Theorem 6.25. V^-Sai and D^-FinSat are HEX? -complete. 



Proof. Let (p e T>^[t] be a sentence. Then, by Eq. 16.14 >, (p is (finitely) satisfi- 
able if and only if cp' is. Now (p' is of the form 

3Ri... 3Rkxp, 



6.4 Conclusion 
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Logic 


Complexity of Sat / FinSat 


Reference 


rO, rO 


nO / vO 

1 ' 1 


|Chu36,Tur36J 


ESO, V, XT 


Remark|2.19l IChu36llTur36l 




NEXP 


1GKV9Z1 






NEXP 


||PH05 


1 






NEXP 


Theorem 


6.25 








Theorems 6.19 


and 


6.23 



Table 6.1: Complexity for extensions / restrictions of first-order logic. 
The results are completeness results for the fuU relational vocabulary. 



where e TOC^. Clearly, <p' is (finitely) satisfiable iff ip is (finitely) satisfiable 
as a TOC'^\t u . . . , Rjt}] sentence. Now since the mapping <p ^ <p' \& 
computable in polynomial time and (finite) satisfiability of i/' can be checked 
in NEXP IPH051, we get that V^-Skt, D^-FinSat e NEXP. 

On the other hand, s ince TO ^ is a sublogic of and J'C^-Sat, TO^- 
FinSat are NEXP-hard 1IGKV97I . it follows that D^.sat and D^.finSat are 
NEXP-hardaswell. ■ 



6.4 Conclusion 

We have studied the complexity of the two-variable fragments of dependence 
logic and independence-friendly logic. We have shown that both the satisfi- 
ablity and finite satisfiability problems for are decidable and, in fact, even 
NEXP-complete. Also we have proved that both problems are undecidable for 
XT^; the satisfiability and finite satisfiabity problems for XT^ are Tlj-complete 



and Z^-complete, respectively. Table 6.1 gives an overview of our complexity 
results as well as previously-known results. 

While the full logics X) and XT are expressively equivalent over sentences, 
we have shown that the finite variable variants X)^ and XT"^ are not, the latter 



being more expressive (Theorem 6.3 and Proposition |6.5| . This was obtained as 
a by-product of the deeper result concerning the decidability barrier between 
these two logics. 

An interesting open question concerns the complexity of the validity (or 
tautology) problem for I?^ and XJ-'^, i. e. the problem in which a formula over 
a vocabulary t is given and the problem is to decide whether all T-structures 
satisfy the formula. For plain first-order logic the complexity of the validity 
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problem is the dual of the complexity of the satisfiability problem because for 
all ^ e TO it holds that 

e TO-Sat iff ^(p (f; TO-Tavt. 

This, however, does not hold for V or IJ- since for these logics the law of 
excluded middle does not hold (cf . Proposition |3.4[ |. Hence, it is not even clear 
whether X'^-Taut is decidable. 
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